Article Crypto Library Bug Allows Certs to be Spoofed

[EXCellR8]

Sounds like network admins might want to push updates as soon as possible.

Microsoft's scheduled security update for Windows includes a fix to a potentially dangerous bug that would allow an attacker to spoof a certificate, making it look like it came from a trusted source. The vulnerability, reported to Microsoft by the National Security Agency, affects Windows 10, Windows Server 2016, Windows Server 2019, and Windows Server version 1803.

Patch Windows 10 and Server now because certificate validation is broken

Crypto library bug allows spoofing of certificates, but no attacks in wild—yet.

arstechnica.com

Affects Windows 10, Server 2016 and Server 2019