A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade containerd | Aug 22, 2024 | Jan 14, 2020 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Jul 28, 2026 | Jan 16, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Nov 15, 2022 | Jan 14, 2020 |
| Microsoft Edge | — | Update Microsoft Edge to the latest version | Nov 17, 2021 | Jan 14, 2020 |
| Msft | — | 2020-01 Cumulative Update for Microsoft Windows 10, version 1507 (KB4534306)2020-01 Cumulative Update for Microsoft Windows 10, version 1809 (KB4534273)2020-01 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB4534273)2020-01 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4528760)2020-01 Cumulative Update for Microsoft Windows 10, version 1803 (KB4534293)2020-01 Cumulative Update for Microsoft Windows 10, version 1709 (KB4534276)2020-01 Cumulative Update for Microsoft Windows 10, version 1607 (KB4534271)2020-01 Cumulative Update for Microsoft Windows 10, version 1909 (KB4528760)2020-01 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB4534271)2020-01 Cumulative Update for Windows Server, version 1909 for x64-based Systems (KB4528760)2020-01 Cumulative Update for Microsoft Windows 10, version 1903 (KB4528760) | Jan 14, 2020 | Jan 14, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub