A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attac

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• microsoft windows server 1803all versions
• microsoft windows server 1903all versions
• microsoft windows server 1909all versions
• microsoft windows server 2016all versions
• microsoft windows server 2019all versions

Versions reported by the vendor

Affected version ranges reported by the assigning authority (microsoft). Independent of NVD's CPE analysis and usually ahead of it.

• Microsoft Windows

  • 10 Version 1803 for 32-bit Systems, 10 Version 1803 for x64-based Systems, 10 Version 1803 for ARM64-based Systems, 10 Version 1809 for 32-bit Systems, 10 Version 1809 for x64-based Systems, 10 Version 1809 for ARM64-based Systems, 10 Version 1709 for 32-bit Systems, 10 Version 1709 for x64-based Systems, 10 Version 1709 for ARM64-based Systems, 10 for 32-bit Systems, 10 for x64-based Systems, 10 Version 1607 for 32-bit Systems … (+1)affected

• Microsoft Windows 10 Version 1903 for 32-bit Systems

  • unspecifiedaffected

• Microsoft Windows 10 Version 1903 for ARM64-based Systems

  • unspecifiedaffected

• Microsoft Windows 10 Version 1903 for x64-based Systems

  • unspecifiedaffected

• Microsoft Windows 10 Version 1909 for 32-bit Systems

  • unspecifiedaffected

• Microsoft Windows 10 Version 1909 for ARM64-based Systems

  • unspecifiedaffected

• Microsoft Windows 10 Version 1909 for x64-based Systems

  • unspecifiedaffected

• Microsoft Windows Server

  • version 1803 (Core Installation), 2019, 2019 (Core installation), 2016, 2016 (Core installation)affected

• Microsoft Windows Server, version 1903 (Server Core installation)

  • unspecifiedaffected

• Microsoft Windows Server, version 1909 (Server Core installation)

  • unspecifiedaffected

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2021-34527Windows Print Spooler Remote Code Execution VulnerabilityKEV
  95Now
• CVE-2021-40444Microsoft MSHTML Remote Code Execution VulnerabilityKEV
  94Now
• CVE-2025-33053Internet Shortcut Files Remote Code Execution VulnerabilityKEV
  91Now
• CVE-2023-36025Windows SmartScreen Security Feature Bypass VulnerabilityKEV
  91Now
• CVE-2022-30190Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityKEV
  91Now
• CVE-2017-8543Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, WinKEV
  91Now

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

A certificate validation error is silently swallowed instead of terminating the connection. Often, code added for a test environment makes its way into production.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1override fun checkServerTrusted(chain: Array<X509Certificate>, type: String) {2  // Left empty for the test environment3}

1val client = OkHttpClient.Builder()2  .certificatePinner(3    CertificatePinner.Builder()4      .add("api.sirius.example", "sha256/…")5      .build()6  ).build()

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.