CVE-2020-1599

CVE-2020-1599 is a Windows Spoofing Vulnerability affecting multiple versions of Microsoft Windows and Windows Server. This medium-severity vulnerability (CVSS 5.5) requires user interaction (UI:R) and local access (AV:L) for an attacker to achieve high integrity impact (I:H), though confidentiality and availability are not impacted. While no public exploit code is available via Metasploit or ExploitDB, there is community discussion indicating potential malware abuse, and media coverage highlights its use in financially motivated attacks, including those delivering Zloader malware.