← CVE Radar
CVE-2020-1464Windows Spoofing Vulnerability
A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded. The update addresses the vulnerability by correcting how Windows validates file signatures.
7.8 HIGHEPSS 38.94%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.8 | HIGH | 3.1microsoft (CNA) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 7.8 | HIGH | 3.1microsoft (CNA) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C |
| 5.5 | MEDIUM | 3.1NVD | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
| 2.1 | LOW | 2.0NVD | AV:L/AC:L/Au:N/C:N/I:P/A:N |
CISA required action
⚡ Known exploited · remediation due May 3, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2020-1464
- Status
- Analyzed
- Assigner (CNA)
- microsoft
- Published
- Aug 17, 2020
- Last modified
- 2026-06-17 03:01 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
MicrosoftWindows 10 Version 18031 version range
- 10.0.0 before publication
MicrosoftWindows 10 Version 18091 version range
- 10.0.0 before publication
MicrosoftWindows Server 20191 version range
- 10.0.0 before publication
MicrosoftWindows Server 2019 (Server Core installation)1 version range
- 10.0.0 before publication
MicrosoftWindows 10 Version 19091 version range
- 10.0.0 before publication
MicrosoftWindows Server, version 1909 (Server Core installation)1 version range
- 10.0.0 before publication
MicrosoftWindows 10 Version 1709 for 32-bit Systems1 version range
- 10.0.0 before publication
MicrosoftWindows 10 Version 17091 version range
- 10.0.0 before publication
MicrosoftWindows 10 Version 1903 for 32-bit Systems1 version range
- 10.0.0 before publication
MicrosoftWindows 10 Version 1903 for x64-based Systems1 version range
- 10.0.0 before publication
MicrosoftWindows 10 Version 1903 for ARM64-based Systems1 version range
- 10.0.0 before publication
MicrosoftWindows Server, version 1903 (Server Core installation)1 version range
- 10.0.0 before publication
MicrosoftWindows 10 Version 20041 version range
- 10.0.0 before publication
MicrosoftWindows Server version 20041 version range
- 10.0.0 before publication
MicrosoftWindows 10 Version 15071 version range
- 10.0.0 before publication
MicrosoftWindows 10 Version 16071 version range
- 10.0.0 before publication
MicrosoftWindows Server 20161 version range
- 10.0.0 before publication
MicrosoftWindows Server 2016 (Server Core installation)1 version range
- 10.0.0 before publication
MicrosoftWindows 71 version range
- 6.1.0 before publication
MicrosoftWindows 7 Service Pack 11 version range
- 6.1.0 before publication
MicrosoftWindows 8.11 version range
- 6.3.0 before publication
MicrosoftWindows Server 2008 Service Pack 21 version range
- 6.0.0 before publication
MicrosoftWindows Server 2008 Service Pack 2 (Server Core installation)1 version range
- 6.0.0 before publication
MicrosoftWindows Server 2008 Service Pack 21 version range
- 6.0.0 before publication
MicrosoftWindows Server 2008 R2 Service Pack 11 version range
- 6.1.0 before publication
MicrosoftWindows Server 2008 R2 Service Pack 1 (Server Core installation)1 version range
- 6.0.0 before publication
MicrosoftWindows Server 20121 version range
- 6.2.0 before publication
MicrosoftWindows Server 2012 (Server Core installation)1 version range
- 6.2.0 before publication
MicrosoftWindows Server 2012 R21 version range
- 6.3.0 before publication
MicrosoftWindows Server 2012 R2 (Server Core installation)1 version range
- 6.3.0 before publication
References
- blog.virustotal.com https://blog.virustotal.com/2019/01/distribution-of-malicious-jar-appended.html
- krebsonsecurity.com https://krebsonsecurity.com/2020/08/microsoft-put-off-fixing-zero-day-for-2-years/
- medium.com https://medium.com/%40TalBeerySec/glueball-the-story-of-cve-2020-1464-50091a1f98bd
- portal.msrc.microsoft.com https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1464
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1464