Vulnerabilities CVE-2012-0151

CVE-2012-0151

Medium

Open

KEV

TLP:CLEAR

Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability

NVD CVE.org

Critical Infrastructure

AI Analysis

No AI analysis yet.

Description

Microsoft — Windows — The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code.

Details

EPSS Score ⓘ: 83.53%

99.7th percentile
Confidence: 100%
CISA KEV
Date Added: Jun 8, 2022
Patch Due: Jun 22, 2022
Required Action: Apply updates per vendor instructions.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.