I was reading an article about NSA informing about critical flaw found in Windows, which is like highest form of irony in itself, don't you think?
They must have already backdoor installed in every version of Windows before they are shipped to user.
Anyhow, about this vulnerability, current system had flawed validation process initiated by CryptoAPI which is quite sensitive in nature.
It can lead someone to believe that malicious authority is also legit and there are chances of identity theft.
You can read more details about this vulnerability in this report:
CVE-2020-0601
Microsoft has already released a patch for it and I advise you to upgrade your systems from other hackers, except NSA ;)