CVE-2020-1464

CVE-2020-1464 is a high-severity spoofing vulnerability in Microsoft Windows that allows attackers to bypass security features by incorrectly validating file signatures, enabling the loading of improperly signed files. With a CVSS score of 7.8, this local vulnerability has a high impact on confidentiality, integrity, and availability. It is actively exploited in the wild, as confirmed by its presence in the KEV catalog, and has garnered significant community discussion and media coverage, including reports of it being known for two years prior to patching. Despite its active exploitation, no public exploit code is currently available on platforms like Metasploit, Nuclei, or ExploitDB.