BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2020-1464Windows Spoofing Vulnerability

A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded. The update addresses the vulnerability by correcting how Windows validates file signatures.

7.8 HIGHEPSS 38.94%⚡ Known Exploited (CISA KEV)NVD: Analyzed

Overview

Severity

ScoreSeverityVersionVector String
7.8HIGH3.1microsoft (CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8HIGH3.1microsoft (CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
5.5MEDIUM3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
2.1LOW2.0NVDAV:L/AC:L/Au:N/C:N/I:P/A:N

CISA required action

⚡ Known exploited · remediation due May 3, 2022

Apply updates per vendor instructions.

Details

CVE ID
CVE-2020-1464
Status
Analyzed
Assigner (CNA)
microsoft
Published
Aug 17, 2020
Last modified
2026-06-17 03:01 UTC
Weaknesses

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-09 09:14 UTC.