CISA known exploited vulnerability

CVE-2012-0151

Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability

SOURCE FACT

Microsoft · Windows

The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code.

Required action

Apply updates per vendor instructions.

CISA notes

https://nvd.nist.gov/vuln/detail/CVE-2012-0151

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

CVE-2012-0151

Microsoft · Windows

Required action

CISA notes

Could this product be present?