Live › vulnerability › CVE-2020-1464
Go to dashboardWindows incorrectly validates file signatures, so a crafted file can pass as properly signed and load. An attacker can bypass security features and get unsigned or improperly signed code to run.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Windows | vendor | – | – |
Confirm the Windows build is patched for CVE-2020-1464 via Windows Update history or Get-HotFix; the sources do not name the KB numbers.
Apply the Microsoft update for CVE-2020-1464 per vendor instructions (CISA required action); the sources do not name the exact KB or build.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded. The update addresses the vulnerability by correcting how Windows validates file signatures.
This page as .md · .json · in your agent: get_signal("CVE-2020-1464")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.