CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Authenticode Digital Signature Bypass and Spoofing Vulnerability (CVE-2020-1464) Analysis & Mitigation Guide
[Affected Scope] All major supported Windows operating systems, including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019, 2020
[Impact] Attackers can bypass security controls (such as EDRs, antivirus, and AppLocker) by appending malicious payloads to legitimately signed files, making them appear valid
[Mitigation] Apply the official Microsoft cumulative security updates (KB) immediately and audit systems for anomalous signed files
Microsoft Windows Authenticode Signature Verification Vulnerability (CVE-2012-0151, MS12-024) Analysis and Mitigation Guide
[Affected Scope] Windows XP, Vista, 7, 8 Consumer Preview, and Windows Server 2003, 2008, 2008 R2
[Impact] Attackers can bypass Authenticode signature verification to execute arbitrary code via modified PE files containing malicious payloads that do not invalidate the digital signature
[Mitigation] Apply the official Microsoft MS12-024 security patch immediately and enforce strict software restriction policies