← CVE Radar
CVE-2020-0601Microsoft Windows CryptoAPI Spoofing Vulnerability
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.
8.1 HIGHEPSS 89.07%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.1 | HIGH | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N |
| 5.8 | MEDIUM | 2.0NVD | AV:N/AC:M/Au:N/C:P/I:P/A:N |
CISA required action
⚡ Known exploited · remediation due May 3, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2020-0601
- Status
- Analyzed
- Assigner (CNA)
- microsoft
- Published
- Jan 14, 2020
- Last modified
- 2026-06-17 02:46 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
MicrosoftWindows13 version ranges
- 10 Version 1803 for 32-bit Systems
- 10 Version 1803 for x64-based Systems
- 10 Version 1803 for ARM64-based Systems
- 10 Version 1809 for 32-bit Systems
- 10 Version 1809 for x64-based Systems
- 10 Version 1809 for ARM64-based Systems
- 10 Version 1709 for 32-bit Systems
- 10 Version 1709 for x64-based Systems
- 10 Version 1709 for ARM64-based Systems
- 10 for 32-bit Systems
- 10 for x64-based Systems
- 10 Version 1607 for 32-bit Systems
- 10 Version 1607 for x64-based Systems
MicrosoftWindows Server5 version ranges
- version 1803 (Core Installation)
- 2019
- 2019 (Core installation)
- 2016
- 2016 (Core installation)
MicrosoftWindows 10 Version 1903 for 32-bit Systems0 version ranges
No version detail published.
MicrosoftWindows 10 Version 1903 for x64-based Systems0 version ranges
No version detail published.
MicrosoftWindows 10 Version 1903 for ARM64-based Systems0 version ranges
No version detail published.
MicrosoftWindows Server, version 1903 (Server Core installation)0 version ranges
No version detail published.
MicrosoftWindows 10 Version 1909 for 32-bit Systems0 version ranges
No version detail published.
MicrosoftWindows 10 Version 1909 for x64-based Systems0 version ranges
No version detail published.
MicrosoftWindows Server, version 1909 (Server Core installation)0 version ranges
No version detail published.
MicrosoftWindows 10 Version 1909 for ARM64-based Systems0 version ranges
No version detail published.
References
- packetstormsecurity.com http://packetstormsecurity.com/files/155960/CurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html
- packetstormsecurity.com http://packetstormsecurity.com/files/155961/CurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html
- portal.msrc.microsoft.com https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0601