CVE-2020-16922

Windows Spoofing Vulnerability

Medium · published October 16, 2020

CVSS v3.1
5.3
EPSS
1%
Percentile
56.4
In the wild
Unconfirmed
What it is

<p>A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files.</p>

<p>In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded.</p>

<p>The update addresses the vulnerability by correcting how Windows validates file signatures.</p>

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00806 · 56.4th percentile
Published
2020-10-16T22:17Z
EPSS history
Timeline
  • 16 OCT 22:17Z
    Windows Spoofing Vulnerability
    cvelistv5