{"cvss":0.0,"datePublished":"2020-01-14T00:00:00Z","dateUpdated":"2020-01-14T00:00:00Z","description":"Microsoft Windows CryptoAPI (Crypt32.dll) contains a spoofing vulnerability in the way it validates Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source. A successful exploit could also allow the attacker to conduct man-in-the-middle attacks and decrypt confidential information on user connections to the affected software. The vulnerability is also known under the moniker of CurveBall.","dueDate":"2022-05-03T00:00:00Z","id":"CVE-2020-0601","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Known","product":"Windows","requiredAction":"Apply updates per vendor instructions.","severity":"CRITICAL","source":"vulncheck_kev","title":"Microsoft Windows CryptoAPI Spoofing Vulnerability","vendor":"Microsoft"}