CVE-2020-1464
HIGH KEVWindows - Info Disclosure
Title source: llmDescription
A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded. The update addresses the vulnerability by correcting how Windows validates file signatures.
References (5)
Scores
CVSS v3
7.8
EPSS
0.0786
EPSS Percentile
92.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CISA KEV
2021-11-03
VulnCheck KEV
2020-08-11
InTheWild.io
2020-08-11
ENISA EUVD
EUVD-2020-12339
CWE
CWE-347
Status
published
Products (20)
microsoft/windows_10_1507
microsoft/windows_10_1607
microsoft/windows_10_1709
microsoft/windows_10_1803
microsoft/windows_10_1809
microsoft/windows_10_1903
microsoft/windows_10_1909
microsoft/windows_10_2004
microsoft/windows_7
microsoft/windows_8.1
... and 10 more
Published
Aug 17, 2020
KEV Added
Nov 03, 2021
Tracked Since
Feb 18, 2026