CVE-2013-3900VulnerabilityPublished 01/10/2022Updated 10/24/2026

CVE-2013-3900: Microsoft WinVerifyTrust function Remote Code Execution

Affects Microsoft WinVerifyTrust functionSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 01/10/2022
KEV deadline: 07/10/2022
EPSS: 44.6% chance of exploitation in 30 days – higher than 98% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2013-3900 (opens in a new tab)

Description

CVE-2013-3900 is a remote code execution vulnerability in Microsoft Windows affecting the WinVerifyTrust function, which improperly handles Authenticode signature verification for PE files. This flaw can allow attackers to execute arbitrary code remotely. It has been exploited in the wild. No specific affected versions or patch information is provided in the input data.

Summary

This vulnerability arises from improper handling of Windows Authenticode signature verification by the WinVerifyTrust function. An attacker can exploit this flaw to execute code remotely by crafting malicious PE files that bypass signature verification. The vulnerability is tracked as CVE-2013-3900 and has been observed in active exploitation scenarios.

Impact

Successful exploitation can lead to remote code execution on affected systems, potentially allowing attackers to run arbitrary code with the privileges of the targeted process. This poses a significant security risk, including system compromise.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Microsoft advisories for updates and apply any available security updates promptly.

Weaknesses

CWE-20Improper Input Validation (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:56:43 UTC

Weaknesses

References

Related threats