What’s Vulnerable › Vulnerabilities

CVE-2020-9361

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-10-23 · updated 2026-06-17

Description

CryptoPro CSP through 5.0.0.10004 on 64-bit platforms allows local users with the SeChangeNotifyPrivilege right to cause denial of service because user-mode input is mishandled during process creation.

Affected products

• Cryptopro Csp: through 5.0.0.10004

References

• https://www.youtube.com/watch?v=b5vPDmMtzwQ
• https://www.youtube.com/watch?v=b5vPDmMtzwQ

Get alerted when CVE-2020-9361 or the next vulnerability affects your stack