coldbraid

CVE-2013-3900 Microsoft WinVerifyTrust Function

A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.

CVSS
not scored

CWE-20

On CISA’s exploited list

Microsoft WinVerifyTrust function Remote Code Execution

Added
2022-01-10
Federal patch deadline
2022-07-10
Ransomware use
not known