NSA Schools Microsoft about a bug in one of the CryptoAPI libraries used since NT 4.0 days. The problem affects Windows 10, Windows Server 2019, and Windows Server 2016 OS versions. This is the first time the NSA got reporting credit for a bug from Microsoft. The Department of Homeland Security issued an Emergency Directive requiring the entire government to patch within ten days. The consequences of not patching the vulnerability are severe and widespread. Remote exploitation tools will likely be made quickly and widely available. Rapid adoption of the patch is the only known mitigation.”]
Source: https://www.darkreading.com/abtv/nsa-schools-microsoft-about-crypto/a/d-id/756878