coldbraid

CVE-2012-0151 Microsoft Windows

The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code.

CVSS
not scored

CWE-20

On CISA’s exploited list

Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability

Added
2022-06-08
Federal patch deadline
2022-06-22
Ransomware use
not known