Windows 10 certificate validation vulnerability

#1

01-16-2020, 11:00 AM
LateForDinner

Member

Join Date: Jan 2015

Posts: 146
- Share
- Tweet
Windows 10 certificate validation vulnerability

This is a new vulnerability for Windows 10, "The Microsoft Windows CryptoAPI fails to properly validate certificates that use Elliptic Curve Cryptography (ECC), which may allow an attacker to spoof the validity of certificate chains."

News, vulnerability ID and patching info are below.

The NSA discovered a severe flaw in Microsoft Windows 10

https://www.cyberscoop.com/windows-10-vulnerability-nsa-public-disclosure/

The NSA recently uncovered a severe vulnerability in Microsoft's Windows operating system, helping the company issue patches and publicly raise awareness.

Cryptic Rumblings Ahead of First 2020 Patch Tuesday – Krebs on Security

https://krebsonsecurity.com/2020/01/cryptic-rumblings-ahead-of-first-2020-patch-tuesday/

Windows 10 Has a Security Flaw So Severe the NSA Disclosed It

https://www.wired.com/story/nsa-windows-10-vulnerability-disclosure/

In a shift toward transparency, the National Security Agency announced a bug that could have left over 900 million PCs vulnerable to attack.

https://www.kb.cert.org/vuls/id/849224/

Security Update Guide - Microsoft Security Response Center

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601

NRA Member, CRPA Member, NRA Members' Council, NRA Range Safety Officer
Tags: None
#2

01-16-2020, 9:09 PM
the86d

Calguns Addict

Join Date: Jul 2011

Posts: 9587
- Share
- Tweet
Calguns don't care...
Calguns says FTPolice...
Comment

Unconfigured Ad Widget

Windows 10 certificate validation vulnerability

Windows 10 certificate validation vulnerability

Comment

Calguns.net Statistics

What's Going On