logo
Vulnerability feed
CONTRIBUTE

Vulnerability

warn

CVE-2020-0601

Reference to the description:

https://nvd.nist.gov/vuln/detail/CVE-2020-0601

Description:
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.
Last updated date:
02/07/2025

Reports

alt

ACTIVELY EXPLOITED

Type:
exploitation
Confidence:
HIGH
Date of publishing:
07/23/2021
Reference url to background

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Type:
exploit
Confidence:
HIGH
Date of publishing:
01/14/2020
Type:
exploit
Confidence:
HIGH
Date of publishing:
01/15/2020
Reference url to background

https://github.com/0xxon/cve-2020-0601

Type:
exploit
Confidence:
HIGH
Date of publishing:
01/15/2020
Type:
exploit
Confidence:
HIGH
Date of publishing:
01/15/2020
Reference url to background

https://github.com/ly4k/CurveBall

Type:
exploit
Confidence:
HIGH
Date of publishing:
01/15/2020
Reference url to background

https://github.com/ollypwn/CurveBall

Type:
exploit
Confidence:
HIGH
Date of publishing:
01/15/2020
Type:
exploit
Confidence:
HIGH
Date of publishing:
01/16/2020
Type:
exploit
Confidence:
HIGH
Date of publishing:
01/16/2020
Type:
exploit
Confidence:
HIGH
Date of publishing:
01/17/2020
Type:
exploit
Confidence:
HIGH
Date of publishing:
01/19/2020
Type:
exploit
Confidence:
HIGH
Date of publishing:
01/20/2020
Reference url to background

https://github.com/gentilkiwi/curveball

Type:
exploit
Confidence:
HIGH
Date of publishing:
01/28/2020
Reference url to background

https://github.com/ioncodes/Curveball

Type:
exploit
Confidence:
HIGH
Date of publishing:
02/03/2020
Type:
exploit
Confidence:
HIGH
Date of publishing:
02/06/2020
Type:
exploit
Confidence:
HIGH
Date of publishing:
02/17/2020
Type:
exploit
Confidence:
HIGH
Date of publishing:
06/26/2020
Reference url to background

https://github.com/ioncodes/Curveball

Vulnerability FeedContributorsAboutBlog

@inTheWild

©2026

Privacy Policy