High severity7.8CISA KEVNVD Advisory· Published Aug 17, 2020· Updated Jun 17, 2026
CVE-2020-1464
CVE-2020-1464
Description
A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded. The update addresses the vulnerability by correcting how Windows validates file signatures.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
34cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*range: 10.0.0
- cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*range: 10.0.0
- cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*range: 10.0.0
- cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*range: 10.0.0
- cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*+ 1 more
- cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*range: 10.0.0
- cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*+ 2 more
- cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*range: 10.0.0
- cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*range: 10.0.0
- cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10_2004:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:*+ 1 more
- cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x86:*range: 6.3.0
- cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_1903:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_1909:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2004:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*+ 2 more
- cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*range: 6.2.0
- cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*range: 10.0.0
- cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*range: 10.0.0
- cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
5- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1464nvdPatchVendor Advisory
- medium.com/%40TalBeerySec/glueball-the-story-of-cve-2020-1464-50091a1f98bdnvdExploitThird Party Advisory
- blog.virustotal.com/2019/01/distribution-of-malicious-jar-appended.htmlnvdThird Party Advisory
- krebsonsecurity.com/2020/08/microsoft-put-off-fixing-zero-day-for-2-years/nvdIssue TrackingThird Party Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.