CVE-2020-0601 Microsoft Windows
Microsoft Windows CryptoAPI (Crypt32.dll) contains a spoofing vulnerability in the way it validates Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted,…
- CVSS
- not scored
On CISA’s exploited list
Microsoft Windows CryptoAPI Spoofing Vulnerability
- Added
- 2021-11-03
- Federal patch deadline
- 2022-05-03
- Ransomware use
- not known