CurveBall
From EverybodyWiki Bios & Wiki
CurveBall (CVE-2020-0601) is a web browser security vulnerability and spoofing attack discovered and released by the NSA in 2020. The exploit targets Microsoft CryptoAPI, the program library that handles cryptographic functions for the Windows 10 operating system.[1][2] The vulnerability affects Microsoft Edge and Google Chrome.[3]
The name CurveBall was given to the attack by Tal Be'ery, a security researcher.[4]
References
- ↑ "Proof-of-concept exploits published for the Microsoft-NSA crypto bug". ZDNet.
- ↑ "Microsoft, NSA confirm killer Windows 10 bug, but a patch is available".
- ↑ "Bad Flaw in Windows 10 Also Affects Chrome Browser".
- ↑ Be'ery, Tal (2020-02-03). "CurveBall's Additional Twist: The Certificate Comparison Bug". ZenGo. Retrieved 2023-01-25.
| Stub icon | This malware-related article is a stub. You can help EverybodyWiki by expanding it. |
This article "CurveBall" is from Wikipedia. The list of its authors can be seen in its historical and/or the page Edithistory:CurveBall. Articles copied from Draft Namespace on Wikipedia could be seen on the Draft Namespace of Wikipedia and not main one.
