<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 04 Oct 2026 23:14:33 +0000</lastBuildDate>
    <item>
      <title>CVE-2020-0664 — Active Directory Information Disclosure Vulnerability</title>
      <link>https://cve.radiocsirt.org/vuln/cve-2020-0664</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Microsoft Windows Server version 2004, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server, version 1909 (Server Core installation), Microsoft Windows Server, version 1903 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008  Service Pack 2 and 6 more&lt;/p&gt;
&lt;p&gt;&amp;lt;p&amp;gt;An information disclosure vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who successfully exploited this vulnerability would be able to read sensitive information about the target system.&amp;lt;/p&amp;gt;
&amp;lt;p&amp;gt;To exploit this condition, an authenticated attacker would need to send a specially crafted request to the AD|DNS service. Note that the information disclosure vulnerability by itself would not be sufficient for an attacker to compromise a system. However, an attacker could combine this vulnerability with additional vulnerabilities to further exploit the system.&amp;lt;/p&amp;gt;
&amp;lt;p&amp;gt;The update addresses the vulnerability by correcting how Active Directory integrated DNS (ADIDNS) handles objects in memory.&amp;lt;/p&amp;gt;&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Microsoft Windows Server version 2004, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server, version 1909 (Server Core installation), Microsoft Windows Server, version 1903 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2008 Service Pack 2, Microsoft Windows Server 2008 Service Pack 2 (Server Core installation), Microsoft Windows Server 2008  Service Pack 2 and 6 more&lt;/p&gt;
&lt;p&gt;&amp;lt;p&amp;gt;An information disclosure vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who successfully exploited this vulnerability would be able to read sensitive information about the target system.&amp;lt;/p&amp;gt;
&amp;lt;p&amp;gt;To exploit this condition, an authenticated attacker would need to send a specially crafted request to the AD|DNS service. Note that the information disclosure vulnerability by itself would not be sufficient for an attacker to compromise a system. However, an attacker could combine this vulnerability with additional vulnerabilities to further exploit the system.&amp;lt;/p&amp;gt;
&amp;lt;p&amp;gt;The update addresses the vulnerability by correcting how Active Directory integrated DNS (ADIDNS) handles objects in memory.&amp;lt;/p&amp;gt;&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cve-2020-0664</guid>
    </item>
  </channel>
</rss>
