Microsoft (WinVerifyTrust function) Data Breach

Microsoft (WinVerifyTrust function) experienced a data breach that was reported on January 10, 2022. A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.

Key Facts

Organization
Microsoft (WinVerifyTrust function)
Date Reported
January 10, 2022
Incident Type
web app exploit
Industry
Technology
Severity Score
5/10
Confidence Level
high
Tags
web app exploit

Source

View original source - External link to primary source documentation

Understanding web app exploit Incidents

Web application exploits target vulnerabilities in websites and APIs. Secure development practices, WAFs, and penetration testing protect against these attacks.