CVE-2020-1464
Microsoft Windows contains a spoofing vulnerability when Windows incorrectly validates file signatures, allowing an attacker to bypass security features and load improperly signed files.
A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded. The update addresses the vulnerability by correcting how Windows validates file signatures.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- blog.virustotal.com/2019/01/distribution-of-malicious-jar-appended.htmlThird Party Advisory
- krebsonsecurity.com/2020/08/microsoft-put-off-fixing-zero-day-for-2-years/Issue TrackingThird Party Advisory
- medium.com/%40TalBeerySec/glueball-the-story-of-cve-2020-1464-50091a1f98bdExploitThird Party Advisory
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1464PatchVendor Advisory
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1464US Government Resource
Actively exploited. Patch immediately.
- Exploitation
- Confirmed in the wild (CISA KEV)
- Federal remediation deadline
- Overdue by 1638 days
- CVSS
- 7.8 HIGH
- EPSS (30-day exploit probability)
- 38.9% · top 1% of all CVEs
- Weakness
- CWE-347
- 1.Apply updates per vendor instructions.
- 2.Treat as emergency change: patch or isolate internet-facing instances first.
- 3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.
Assessment is derived automatically from the live signals above; verify against your own asset inventory.