All packages
Windows CryptoAPI vulnerabilities
3 known CVE vulnerabilities in Windows CryptoAPI, translated and rated.
- CVE-2020-0601HighActively exploited
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source.
- CVE-2026-55144High
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally.
- CVE-2023-35339High
A vulnerability in Windows CryptoAPI allows for a Denial of Service (DoS) attack, potentially leading to service unavailability. An attacker can exploit this flaw to disrupt system operations.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS