Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence

CVE-2020-1464

MediumExploitedPublic exploit

A spoofing vulnerability exists when Windows incorrectly validates file signatures.

Published Aug 17, 2020 · Updated Feb 23, 2026

Key Facts

Patch immediately
  • CVE-2020-1464 is a medium-severity vulnerability (CVSS 5.5 v3.1) affecting Windows 10 1507 (Microsoft), Windows 10 1607 (Microsoft), Windows 10 (Microsoft) and 19 more products.
  • It is exploited in the wild, listed in CISA KEV, Industry KEV feed, CIRCL KEV, ENISA EUVD since Aug 11, 2020. Public exploit code is available.
  • EPSS estimates a 39% probability of exploitation in the next 30 days.
  • Fixed versions are available, including Windows 10 publication, Windows 10 1507 publication, Windows 10 1607 publication.
  • Brandefense priority: patch immediately, because it is listed as exploited in the wild.

CVSS v3.1

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS (30-day exploit likelihood)

39%

Higher than 98.5% of all scored CVEs

Exploited in the wild

Yes

4 catalog listings

Public exploit code

Available

Proof-of-concept or weaponized module

Get the full CVE-2020-1464 brief as a PDF

Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.

Description

A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded. The update addresses the vulnerability by correcting how Windows validates file signatures.

Known-Exploited Catalog Listings

CatalogAddedRemediation dueRansomware use
CISA KEVNov 3, 2021May 3, 2022Not reported
Industry KEV feedAug 11, 2020May 3, 2022Not reported
CIRCL KEVNov 3, 2021May 3, 2022Not reported
ENISA EUVDNov 3, 2021n/aNot reported

Required action: Apply updates per vendor instructions.

Affected Products

48 affected entries in total
ProductAffected versionsFixed in
Windows 10 1507MicrosoftSee advisorypublication
Windows 10 1607MicrosoftSee advisorypublication
Windows 10Microsoft1709, 1903publication
Windows 10 1709MicrosoftSee advisoryn/a
Windows 10 1803MicrosoftSee advisorypublication
17 more affected products in the full CVE brief

Patched Releases

Windows 10

publication

Windows 10 1507

publication

Windows 10 1607

publication

Windows 10 1803

publication

Windows 10 1809

publication

Windows 10 1909

publication

Windows 7

publication

Windows 8.1

publication

Windows Rt 8.1

publication

Windows Server 1903

publication

Windows Server 1909

publication

Windows Server 2004

publication

windows server 2008 R2

publication

Windows Server 2008 Sp2

publication

Windows Server 2012

publication

windows server 2012 R2

publication

Windows Server 2016

publication

Windows Server 2019

publication

Timeline

  1. Added to Industry KEV feed

    Aug 11, 2020

  2. Publicly disclosed

    Aug 17, 2020

  3. Added to CISA KEV

    Nov 3, 2021

  4. Added to CIRCL KEV

    Nov 3, 2021

  5. Added to ENISA EUVD

    Nov 3, 2021

  6. Last updated

    Feb 23, 2026

Weakness Type

  • CWE-347 Improper Verification of Cryptographic Signature

References

3 more references in the full CVE brief

FAQ

Common Questions.

Is CVE-2020-1464 Running On Your Attack Surface?

Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.

Request A Demo