Microsoft Windows Certificates Spoofing Vulnerability

A spoofing vulnerability has been identified in Windows Certificates due to improper verification of cryptographic signatures. This issue allows an unauthorized attacker to perform spoofing over a network. The vulnerability affects multiple Windows versions, including Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025.

Impact

Exploitation of this vulnerability could lead to unauthorized spoofing over the network.

Remediation

Users can apply the security updates provided by Microsoft. These security updates can be downloaded via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5065425, KB5065426, KB5065427, KB5065428, KB5065429, and KB5065430.