CVE-2013-3900 — Actively Exploited: WinVerifyTrust function (Microsoft)

Name: CVE-2013-3900 — Actively Exploited: WinVerifyTrust function (Microsoft)
Creator: ExploitWatch

A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.

CVE ID	CVE-2013-3900
Vendor	Microsoft
Product	WinVerifyTrust function
Vulnerability name	Microsoft WinVerifyTrust function Remote Code Execution
Date added	2022-01-10
Remediation due	2022-07-10
Known ransomware use	Unknown
Required action	Apply updates per vendor instructions.
Description	A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.
Source	CISA Known Exploited Vulnerabilities

🔍 Search all exploited vulnerabilities →

$1499/mo

Try ExploitWatch →