{"schema_version":"1","data":[{"id":2935,"advisory_id":"f5d815fa-b6fd-4672-8ef7-e7da94e25ece","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3900","source_published_at":"2022-01-10T00:00:00+00:00","published_at":"2026-10-24T21:26:36.556908+00:00","extraction_method":"structured","technologies":["core-kev","winverifytrust-function"],"cve_ids":["CVE-2013-3900"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft WinVerifyTrust function Remote Code Execution","summary":"A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-3900","products":[{"name":{"value":"WinVerifyTrust function","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-3900","aliases":["CVE-2013-3900"],"affected":[],"modified":"2022-01-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2013-3900","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-3900","dueDate":"2022-07-10","product":"WinVerifyTrust function","dateAdded":"2022-01-10","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.","vulnerabilityName":"Microsoft WinVerifyTrust function Remote Code Execution","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-3900","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"medium","linked_cves":[{"cve":"CVE-2013-3900","metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":5.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"products":[{"name":{"value":"Windows 10 Version 1809","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1809","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2019","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2019 (Server Core installation)","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2022","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 11 version 21H2","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 21H2","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 11 version 22H2","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 22H2","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2025 (Server Core installation)","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 11 version 22H3","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 11 Version 23H2","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2022, 23H2 Edition (Server Core installation)","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 11 Version 24H2","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2025","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1507","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1607","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2016","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2016 (Server Core installation)","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2008 Service Pack 2","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2008 Service Pack 2 (Server Core installation)","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2008  Service Pack 2","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2008 R2 Service Pack 1","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2008 R2 Service Pack 1 (Server Core installation)","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2012","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2012 (Server Core installation)","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2012 R2","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2012 R2 (Server Core installation)","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2013-3900","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveID"}],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false}],"next_after":2935,"next_before":2935}