Feed/CVE-2013-3900
CVE-2013-3900MEDIUMCVSS 5.5CISA KEV: Actively Exploited

Microsoft WinVerifyTrust function Remote Code Execution

Published Jan 10, 2022·Updated Oct 7, 2026

NVD Description

A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.

Public Exploits & PoCs10 found

[POC] CVE-2013-3900 — nessus-vulnerability-scanning-lab

Enterprise vulnerability management on Azure — Terraform-deployed Nessus scanner, credentialed scanning, CVE-2013-3900 remediation with verified re-scan

[POC] CVE-2013-3900 — cve-2013-3900-winverifytrust-mitigation

PowerShell remediation for CVE-2013-3900 (WinVerifyTrust) / Tenable Plugin 166555 using EnableCertPaddingCheck.

[POC] CVE-2013-3900 — vulnerability-remediation-cve-2013-3900

End-to-end remediation of CVE-2013-3900 using PowerShell and Tenable. Demonstrates vulnerability identification, registry hardening, and automated verification in an Azure environment

[POC] CVE-2013-3900 — CVE-2013-3900-PowerShell-PoC

CVE PoC

[POC] CVE-2013-3900 — CVE-2013-3900

CVE-2013-3900 WinVerifyTrust Signature

[POC] CVE-2013-3900 — CVE-2013-3900_Remediation_PowerShell

Script to make changes on registry to fix CVE-2013-3900. It comes with an option to undo in case it breaks something on your environment.

[POC] CVE-2013-3900 — WinVerifyTrust

WinVerifyTrust Signature Validation CVE-2013-3900 Mitigation (EnableCertPaddingCheck)

[POC] CVE-2013-3900 — CVE-2013-3900-WinTrustVerify

Powershell script that checks for cert padding in the Windows Registry and adds it if it does not exist. Meant to resolve the WinTrustVerify Vulnerability.

[POC] CVE-2013-3900 — Fix-WinVerifyTrustSignatureValidationVuln

Fix WinVerifyTrust Signature Validation Vulnerability, CVE-2013-3900, QID-378332

[POC] CVE-2013-3900 — vulnerability-CVE-2013-3900

Remediation for CVE-2013-3900

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free