EXPOSURES › CVE-2013-3900
CVE-2013-3900
HIGH ⌖ ON CISA KEV · EXPLOITEDMicrosoft's WinVerifyTrust function allowed remote code execution via flawed Authenticode signature verification.
The WinVerifyTrust function mishandled Authenticode signature verification for PE files, enabling attackers to execute arbitrary code remotely. DIB organizations must ensure all Windows systems are patched, as this KEV vulnerability was actively exploited and could compromise endpoint integrity and compliance with NIST 800-171 controls requiring patch management and vulnerability mitigation.
Shame score — A critical RCE flaw in a core Windows API was actively exploited in the wild for years before patching, reflecting severe negligence in patch management and vulnerability disclosure.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |