CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-01-14
Windows CryptoAPI Elliptic Curve Cryptography (ECC) Certificate Validation Bypass Vulnerability (CVE-2020-0601, CurveBall)
[Affected Scope] Microsoft Windows 10, Windows Server 2016, and Windows Server 2019 systems utilizing the Crypt32.dll library.
[Impact] Attackers can spoof code-signing certificates to execute malicious binaries as trusted software, or perform Man-in-the-Middle (MitM) attacks to decrypt HTTPS traffic.
[Mitigation] Apply the official Microsoft security updates immediately and monitor network traffic for non-standard ECC parameters.