---
id: "CVE-2020-1464"
kind: "vulnerability"
aliases: ["CVE-2020-1464"]
title: "Microsoft Windows: Microsoft Windows Spoofing Vulnerability"
severity: "high"
cvss: 7.8
epss: 0.38946
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Microsoft Windows", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "infrastructure", "windows"]
not_affected_if: ["unknown"]
published_at: "2020-08-17T19:15:14+00:00"
first_seen_at: "2026-10-23T19:11:53+00:00"
updated_at: "2026-10-23T21:57:34+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1464", "first_seen_at": "2026-10-23T19:11:53+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1464", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1464", "first_seen_at": "2026-10-23T21:57:34+00:00"}]
---

# Microsoft Windows: Microsoft Windows Spoofing Vulnerability

Windows incorrectly validates file signatures, so a crafted file can pass as properly signed and load. An attacker can bypass security features and get unsigned or improperly signed code to run.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Microsoft Windows affected ? fixed ?

## How to check

Confirm the Windows build is patched for CVE-2020-1464 via Windows Update history or Get-HotFix; the sources do not name the KB numbers.

## Fix

Apply the Microsoft update for CVE-2020-1464 per vendor instructions (CISA required action); the sources do not name the exact KB or build.

## Timeline

- 2026-10-23T19:11:53+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1464
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2020-1464
- 2026-10-23T21:57:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2020-1464

## From the sources

A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files.
In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded.
The update addresses the vulnerability by correcting how Windows validates file signatures.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_