CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows WinVerifyTrust Authenticode Signature Bypass and Remote Code Execution Vulnerability (CVE-2013-3900)
[Affected Scope] All currently supported versions of Microsoft Windows, including Windows 10, Windows 11, and Windows Server
[Impact] Attackers can inject malicious code into the unverified padding areas of signed PE files without invalidating the digital signature, bypassing security controls to execute arbitrary code
[Mitigation] Enable the 'EnableCertPaddingCheck' registry setting to enforce strict Authenticode signature verification across all endpoints
Microsoft Windows Authenticode Signature Verification Vulnerability (CVE-2012-0151, MS12-024) Analysis and Mitigation Guide
[Affected Scope] Windows XP, Vista, 7, 8 Consumer Preview, and Windows Server 2003, 2008, 2008 R2
[Impact] Attackers can bypass Authenticode signature verification to execute arbitrary code via modified PE files containing malicious payloads that do not invalidate the digital signature
[Mitigation] Apply the official Microsoft MS12-024 security patch immediately and enforce strict software restriction policies