Microsoft WinVerifyTrust function Remote Code Execution
Microsoft · WinVerifyTrust function
Date added (CISA)
2022-01-10
Remediation due
2022-07-10
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.