CVE-2012-0151

Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability

The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code. Vendor/Product: Microsoft Windows. Added to CISA KEV 2022-06-08; required action: Apply updates per vendor instructions.

Category: Vulnerability, Known Exploited