- Vendor / Project
- Microsoft
- Product
- WinVerifyTrust function
- Date added
- Jan 10, 2022
- Due date
- Jul 10, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-20
Description
A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.
Required action
Apply updates per vendor instructions.