freak

The FREAK vulnerability, short for Factoring attack on RSA-EXPORT Keys, is a security issue affecting Microsoft Windows through the Secure Channel (Schannel) component. Microsoft confirmed that all supported Windows versions are vulnerable to this attack, which allows an attacker to downgrade SSL/TLS encrypted sessions to use weaker export-grade RSA ciphers. This security feature bypass was addressed by Microsoft in Security Advisory 3046015, released in March 2015. The advisory provided guidance and clarified that no workaround exists for Windows Server 2003. Users were advised to check browser vulnerability and apply updates to mitigate the risk. The FREAK tag covers discussions on the vulnerability, its impact on Windows, and Microsoft's response.