Microsoft Windows DNS Server Remote Code Execution Vulnerability

When

2021-11-03 00:00 UTC · day precision

Where

Global (internet)

Category

cyber_exploit

Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.

Sources

• CISA ↗ · first seen 2021-11-03 00:00 UTC

Defaxon links out to the original reporting and never republishes article text.

Correlated events

Computed by the Defaxon correlation engine — linked by shared actors, co-location, and temporal proximity. Scored hypotheses, never causal claims.

No correlated events found in the current window. As more events arrive, connections form automatically.

← Back to the live map