The vulnerability in the programming interface of the Windows CryptoAPI (Crypt32.dll) on Windows operating systems allows attackers to circumvent existing security restrictions and execute a type of “man-in-the-middle” attack.

The vulnerability of the Windows CryptoAPI Crypt32.dll programming interface on Windows operating systems is related to errors in authenticating ECC certificates. Exploiting this vulnerability allows a remote attacker to circumvent existing security restrictions and execute a type of...