VYPR
← All advisories
High severity8.1CISA KEVNVD Advisory· Published Jan 14, 2020· Updated Jun 17, 2026

CVE-2020-0601

CVE-2020-0601

Description

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

38
  • Golang/Go
    cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*
    Range: >=1.12,<1.12.16
  • Microsoft/Windows 10 19095 versions
    cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*+ 4 more
    • cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x86:*
    • cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:x86:*
  • Microsoft/Windows 10 16072 versions
    cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*
  • Microsoft/Windows 10 17093 versions
    cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:arm64:*+ 2 more
    • cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x86:*
  • Microsoft/Windows 10 18033 versions
    cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:*+ 2 more
    • cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x86:*
  • Microsoft/Windows 10 18093 versions
    cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*+ 2 more
    • cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*
  • Microsoft/Windows 10 19033 versions
    cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:*+ 2 more
    • cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x86:*
  • Microsoft/Windows Server 1803
    cpe:2.3:o:microsoft:windows_server_1803:-:*:*:*:*:*:*:*
  • Microsoft/Windows Server 1903
    cpe:2.3:o:microsoft:windows_server_1903:-:*:*:*:*:*:*:*
  • Microsoft/Windows Server 1909
    cpe:2.3:o:microsoft:windows_server_1909:-:*:*:*:*:*:*:*
  • Microsoft/Windows Server 2016
    cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
  • Microsoft/Windows Server 2019
    cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
  • Microsoft/Windows CryptoAPIllm-fuzzy
  • Microsoft/Windowsllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 10 Version 1803 for 32-bit Systems
  • osv-coords
    pkg:bitnami/golang
    Range: >= 1.12.0, < 1.12.16
  • Microsoft/Windows 10 Version 1903 for 32-bit Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1903 for ARM64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1903 for x64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1909 for 32-bit Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1909 for ARM64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1909 for x64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows Server 2003cpe-rescue
    Range: version 1803 (Core Installation)
  • Microsoft/Windows Server, version 1903 (Server Core installation)v5
    Range: unspecified
  • Microsoft/Windows Server, version 1909 (Server Core installation)v5
    Range: unspecified

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.