Windows Cryptographic Services Remote Code Execution Vulnerability

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
The attacker must inject themselves into the logical network path between the target and the resource requested by the victim to read or modify network communications. This is called a machine-in-the-middle (MITM) attack.

How could an attacker exploit this vulnerability?
For successful exploitation, a malicious certificate needs to be imported on an affected system. An attacker could upload a certificate to a service that processes or imports certificates, or an attacker could convince an authenticated user to import a certificate on their system.

Security updates
10.0.17763.5820 — https://support.microsoft.com/help/5037765
10.0.20348.2461 — https://support.microsoft.com/help/5037782
10.0.20348.2458 — https://support.microsoft.com/help/5037848
10.0.22000.2960 — https://support.microsoft.com/help/5037770
10.0.19044.4412 — https://support.microsoft.com/help/5037768
10.0.22621.3593 — https://support.microsoft.com/help/5037771
10.0.25398.887 — https://support.microsoft.com/help/5037781
10.0.10240.20651 — https://support.microsoft.com/help/5037788
10.0.14393.6981 — https://support.microsoft.com/help/5037763
6.0.6003.22668 — https://support.microsoft.com/help/5037800
6.0.6003.22668 — https://support.microsoft.com/help/5037836
6.1.7601.27117 — https://support.microsoft.com/help/5037780
6.1.7601.27117 — https://support.microsoft.com/help/5037803
6.2.9200.24868 — https://support.microsoft.com/help/5037778
6.3.9600.21972 — https://support.microsoft.com/help/5037823