Page generated: 08 Nov 2026, 09:00 UTC
← Dashboard

CVE-2020-1350

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.

CVSS 10.0 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
0.0/10
REALITY · THREAT PRIORITY
9.0/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 10: +1.50
  • Fresh EPSS: 96.72%: +0.48

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 28 documents and public datasets.

Hype components

Headline sample (25%)
0/100
Press, 30 days (60%)
0/100
Grounded branding (15%)
0/100
HYPE TOTAL0/100

Sources and documents

Dark Reading
Press · 08 Sep 2026, 07:00 · Patch Tuesday Sets Another Record With 974 CVEs - Dark Reading
CISO Series
Press · 12 Jan 2026, 08:00 · BreachForums data leak, Insta breach, UK government exempt - CISO Series
The Record from Recorded Future News
Press · 08 Jan 2026, 08:00 · CISA sunsets 10 emergency directives thanks to evolution of exploited vulnerabilities catalog - The Record from Recorded Future News
Qualys
Press · 23 Aug 2022, 07:00 · Mitigating the Risk of Zero-Day Vulnerabilities by using Compensating Controls - Qualys
Qualys
Press · 23 Feb 2022, 08:00 · Enhanced Native DNS based Scanning with Qualys VMDR - Qualys
See all 28 source documents
Qualys
Press · 22 Feb 2022, 08:00 · Managing CISA Known Exploited Vulnerabilities with Qualys VMDR - Qualys
SOC Prime
Press · 05 May 2021, 07:00 · Boost Your Google Chronicle Platform with SOC Prime Detection Rules - SOC Prime
www.trendmicro.com
Press · 28 Apr 2021, 07:00 · Manage Zero Day Exploits (ZDI) with Trend Micro Solutions - www.trendmicro.com
www.trendmicro.com
Press · 28 Apr 2021, 07:00 · Manage Zero Day Exploits (ZDI) with Trend Micro Solutions - www.trendmicro.com
Unit 42
Press · 12 Apr 2021, 07:00 · Network Attack Trends: Internet of Threats (November 2020-January 2021) - Unit 42
BleepingComputer
Press · 04 Mar 2021, 08:00 · Windows DNS SIGRed bug gets first public RCE PoC exploit - BleepingComputer
Help Net Security
Press · 03 Feb 2021, 08:00 · Top 10 most exploited vulnerabilities from 2020 - Help Net Security
BleepingComputer
Press · 20 Oct 2020, 07:00 · NSA: Top 25 vulnerabilities actively abused by Chinese hackers - BleepingComputer
SOC Prime
Press · 23 Jul 2020, 07:00 · CVE-2020-3452: Unauthenticated File Read in Cisco ASA & Cisco Firepower Detection - SOC Prime
Help Net Security
Press · 21 Jul 2020, 07:00 · Details and PoC for critical SharePoint RCE flaw released - Help Net Security
Unit 42
Press · 21 Jul 2020, 07:00 · Threat Brief: Microsoft DNS Server Wormable Vulnerability CVE-2020-1350 - Unit 42
TechTarget
Press · 17 Jul 2020, 07:00 · ‘SigRed’ alert: Experts urge action on Windows DNS vulnerability - TechTarget
BleepingComputer
Press · 16 Jul 2020, 07:00 · Federal agencies told to patch wormable Windows DNS bug in 24 hours - BleepingComputer
Forbes
Press · 15 Jul 2020, 07:00 · Critical Windows Worm Gets 10/10 Severity Rating, Microsoft Says Patch Servers Now - Forbes
TechTarget
Press · 15 Jul 2020, 07:00 · DNS Server vulnerability tops July Patch Tuesday concerns - TechTarget
Sophos
Press · 15 Jul 2020, 07:00 · Patch now! SIGRED – the wormable hole in your Windows servers - Sophos
Kaspersky
Press · 15 Jul 2020, 07:00 · CVE-2020-1350: Vulnerability in Windows DNS servers - Kaspersky
Sophos
Press · 14 Jul 2020, 07:00 · It’s always DNS, including on July, 2020’s Patch Tuesday - Sophos
Check Point Research
Press · 14 Jul 2020, 07:00 · SIGRed - Resolving Your Way into Domain Admin: Exploiting a 17 Year-old Bug in Windows DNS Servers - Check Point Research
Qualys
Press · 14 Jul 2020, 07:00 · Automatically Discover, Prioritize and Remediate Windows DNS Vulnerability (SigRed - CVE-2020-1350) Using Qualys VMDR - Qualys
Computer Weekly
Press · 14 Jul 2020, 07:00 · Check Point unearths critical SigRed bug in Windows DNS - Computer Weekly
Check Point Blog
Press · 14 Jul 2020, 07:00 · SIGRed – this is not just another vulnerability- Patch now to stop the next cyber pandemic - Check Point Blog
Rapid7
Press · 14 Jul 2020, 07:00 · Windows DNS Server RCE Vulnerability (CVE-2020-1350) - Rapid7

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 9.0 (2026-11-02 15:12). The curve appears once the score changes.

Public exploit evidence

6

Public exploit entries / repo candidates

See 6 repos with metrics
RepositoryStarsForksLanguageUpdated
ZephrFish/CVE-2020-1350_HoneyPoC28068PowerShell31 Jul 2026, 00:59
psc4re/NSE-scripts16227Lua16 Aug 2021, 18:16
tinkersec/cve-2020-135010321Shell15 Jul 2020, 13:53
captainGeech42/CVE-2020-1350183Python16 Jul 2020, 18:32
Plazmaz/CVE-2020-1350-poc41Python20 Jul 2020, 03:51
sty886/CVE-2020-1350-SigRed00Python07 Mar 2026, 12:11
Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 10; EPSS 96.7%
Attention, last 30 days
0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential
network access, no prior privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:58:13.266659+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
First press mention
14 Jul 2020, 07:00
Published
14 Jul 2020, 22:54
Added to the CISA KEV catalog
03 Nov 2021, 00:00
Latest press mention
08 Sep 2026, 07:00
Score calculated
05 Nov 2026, 13:58
PoCs on GitHub
6 repositories