CVE-2013-3900

CISA KEV

ACT NOW Priority: 0.00 BB Relevance: 0/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.

CISA Known Exploited Vulnerability

Vendor / Product Microsoft — WinVerifyTrust function

Date Added 2022-01-10

Remediation Due 2022-07-10

https://nvd.nist.gov/vuln/detail/CVE-2013-3900

Weakness Classification (1)

CWE-347

Affected Software (31)

Vendor	Product	Version
microsoft	windows_10_1507	-
microsoft	windows_10_1607	-
microsoft	windows_10_1607	-
microsoft	windows_10_1809	-
microsoft	windows_10_1809	-
microsoft	windows_10_1809	-
microsoft	windows_10_1909	-
microsoft	windows_10_20h2	-
microsoft	windows_10_21h1	-
microsoft	windows_10_21h2	-
microsoft	windows_10_22h2	-
microsoft	windows_11_21h2	-
microsoft	windows_11_21h2	-
microsoft	windows_11_22h2	-
microsoft	windows_11_22h2	-
microsoft	windows_11_23h2	-
microsoft	windows_11_23h2	-
microsoft	windows_11_24h2	-
microsoft	windows_11_24h2	-
microsoft	windows_7	-
microsoft	windows_8.1	-
microsoft	windows_rt_8.1	-
microsoft	windows_server_2008	-
microsoft	windows_server_2008	r2
microsoft	windows_server_2012	-
microsoft	windows_server_2012	r2
microsoft	windows_server_2016	-
microsoft	windows_server_2019	-
microsoft	windows_server_2022	-
microsoft	windows_server_2022_23h2	-