| Summary | The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can modify the `HKEY_CURRENT_USER` registry to execute arbitrary commands. |
|---|---|
| Publication Date | Aug. 2, 2024, 8:16 p.m. |
| Registration Date | Aug. 3, 2024, 10 a.m. |
| Last Update | Aug. 2, 2024, 9:59 p.m. |