Microsoft Put Off Fixing Zero Day for 2 Years
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-1464 | File Signature Validation Spoofing in Microsoft Windows | 7.8 | 39% | KEVPoC | KEV |
From the original article
3 min read at krebsonsecurity.comA security flaw in the way Microsoft Windows guards users against malicious files was actively exploited in malware attacks for two years before last week, when Microsoft finally issued a software update to correct the problem. One of the 120 security holes Microsoft fixed on Aug.
krebsonsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.