Back to CVE Browser

CVE-2020-1464

🔥 Known Exploited (CISA KEV)HIGH

7.8

CVSS Severity Score

EPSS Score93.5700%

EPSS Percentile85.35th

Published2020-08-17

Last Modified2026-02-23

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded. The update addresses the vulnerability by correcting how Windows validates file signatures.

Affected Platforms (CPE)

💻

Microsoft

Windows 10 1507

All versions

💻

Microsoft

Windows 10 1607

All versions

💻

Microsoft

Windows 10 1709

All versions

💻

Microsoft

Windows 10 1803

All versions

References & Advisories

🔗 https://blog.virustotal.com/2019/01/distribution-of-malicious-jar-appended.html

🔗 https://krebsonsecurity.com/2020/08/microsoft-put-off-fixing-zero-day-for-2-years/

🔗 https://medium.com/%40TalBeerySec/glueball-the-story-of-cve-2020-1464-50091a1f98bd

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1464

🔗 https://blog.virustotal.com/2019/01/distribution-of-malicious-jar-appended.html

🔗 https://krebsonsecurity.com/2020/08/microsoft-put-off-fixing-zero-day-for-2-years/

🔗 https://medium.com/%40TalBeerySec/glueball-the-story-of-cve-2020-1464-50091a1f98bd

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1464

Related Security Intelligence Articles

Daily Global Cyber Threat Intelligence Digest — July 28, 2026

Today’s threat intelligence covers the Certighost CVE-2026-54121 AD CS domain-takeover chain, vBulletin CVE-2026-61511 pre-auth RCE, the expanding Dysphoria botnet, and the DentaQuest and Fairlife breach updates.

Weekly Cybersecurity News: Jul 27, 2026

Weekly cybersecurity news covering active exploitation of Check Point SmartConsole CVE-2026-16232, Qilin ransomware leveraging PAN-OS GlobalProtect vulnerabilities, Russian LAUNDRY BEAR targeting Zimbra email servers, and FakeGit malicious repositories.

Daily Global Cyber Threat Intelligence Digest — July 24, 2026

This digest covers active exploitation of Check Point CVE-2026-16232 SmartConsole authentication bypass, Russian LAUNDRY BEAR targeting Zimbra vulnerabilities, malicious Claude Desktop ad campaigns deploying SectopRAT, and Chaos ransomware msaRAT operations.

Related Vulnerabilities

CVE-2026-419399.3

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management inte...

CVE-2026-624366.5

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] ...

CVE-2026-624356.5

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] ...

CVE-2026-656246.9

Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker t...