July 2020 Patch Tuesday: Microsoft plugs wormable Windows DNS Server RCE flaw
60
CVE-2020-1421
—CVSS 3.1
8.8 high
EPSS
75%p99
Published
()
Modified
Description
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'.
- Vendors
- microsoft
- Products
- windows 10, windows server 2016, windows server 2019
- Weakness
- CWE-843
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
In the news3 stories
60
60