NSA has discovered a critical vulnerability (CVE-2020-0601) affecting Microsoft Windows:registered:1 cryptographic functionality.
The certificate validation vulnerability allows an attacker to undermine how Windows verifies cryptographic trust and can
enable remote code execution. The vulnerability affects Windows 10 and Windows Server 2016/2019 as well as
applications that rely on Windows for trust functionality. Exploitation of the vulnerability allows attackers to defeat trusted
network connections and deliver executable code while appearing as legitimately trusted entities.
(edited)