返回 CVE 瀏覽器

CVE-2020-1464

🔥 Known Exploited (CISA KEV)HIGH

7.8

CVSS Severity Score

EPSS Score93.5700%

EPSS Percentile85.35th

Published2020-08-17

Last Modified2026-02-23

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded. The update addresses the vulnerability by correcting how Windows validates file signatures.

Affected Platforms (CPE)

💻

Microsoft

Windows 10 1507

All versions

💻

Microsoft

Windows 10 1607

All versions

💻

Microsoft

Windows 10 1709

All versions

💻

Microsoft

Windows 10 1803

All versions

References & Advisories

🔗 https://blog.virustotal.com/2019/01/distribution-of-malicious-jar-appended.html

🔗 https://krebsonsecurity.com/2020/08/microsoft-put-off-fixing-zero-day-for-2-years/

🔗 https://medium.com/%40TalBeerySec/glueball-the-story-of-cve-2020-1464-50091a1f98bd

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1464

🔗 https://blog.virustotal.com/2019/01/distribution-of-malicious-jar-appended.html

🔗 https://krebsonsecurity.com/2020/08/microsoft-put-off-fixing-zero-day-for-2-years/

🔗 https://medium.com/%40TalBeerySec/glueball-the-story-of-cve-2020-1464-50091a1f98bd

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1464

相關資安分析文章

每日全球網絡威脅情報摘要｜2026 年 7 月 28 日

本期威脅情報聚焦 Certighost CVE-2026-54121 的 AD CS 網域接管攻擊鏈、vBulletin CVE-2026-61511 預先驗證 RCE、Dysphoria 殭屍網絡擴張，以及 DentaQuest 與 Fairlife 資料外洩及勒索事件。

週度網絡安全新聞：2026 年 7 月 27 日

本週重大安全週報聚焦於 Check Point SmartConsole CVE-2026-16232 驗證繞過之在野利用、PAN-OS GlobalProtect 漏洞與 Qilin 勒索軟體侵襲、俄羅斯 LAUNDRY BEAR 對 Zimbra 進行之國家級郵件間諜活動，以及 Windchill 與 FakeGit 惡意 Repositories 威脅趨勢。

每日全球網絡威脅情報摘要｜2026 年 7 月 24 日

本期情報聚焦於 Check Point CVE-2026-16232 SmartConsole 控制平面身分驗證繞過之主動利用、俄羅斯 LAUNDRY BEAR 利用 Zimbra 漏洞進行電子郵件間諜活動，以及假冒 Claude Desktop 的惡意廣告攻擊與 Chaos 勒索軟體運作動態。

相關漏洞威脅

CVE-2026-419399.3

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management inte...

CVE-2026-624366.5

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] ...

CVE-2026-624356.5

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] ...

CVE-2026-656246.9

Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker t...