Constellation · CASCA

Constellation explorer

Every signal has a story.Follow the evidence.

Return to triage

Find a CVE by identifier or text

↵ select

Minimum eligible CVSSOrderKEV only

Start with evidence

Current exploration

CVE-2013-3900

Your trail

Where next?

Selected cve

CVE-2013-3900

Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the format is different from the original CVE published in 2013, except for clarifications about how to configure the EnableCertPaddingCheck registry value, the information herein remains unchanged from the original text published on December 10, 2013, Microsoft does not plan to enforce the stricter verification behavior as a default functionality on supported releases of Microsoft Windows. This behavior remains available as an opt-in feature via reg key setting, and is available on supported editions of Windows released since December 10, 2013. This includes all currently supported versions of Windows 10 and Windows 11. The supporting code for this reg key was incorporated at the time of release for Wi

59 retained evidence references · snapshot-bound · open authoritative view

StateAssessments differ

Priority67.1–89.2

Coverage72.5%

Connections49

Choose an action.

Evidence state

conflicted
identity unresolved
known present
source constrained
conflicting evidence

Snapshot-bound reason tuple

Last verified source snapshot retainedfactor_a_kev

The admitted source contract constrains coverage for this claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Review source contract

Evidence supportedfactor_b_epss

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Assessments differfactor_c_cvss

Eligible assertions materially conflict and remain visible side by side.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Resolve conflict

Source-reported scopefactor_d_breadth

The source assertion is retained, but its canonical identity is unresolved.

Revision: casca-factor-d-obligations-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Resolve identity

Connections 49

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows Server 2022

d369a6ff-ce7c-4dc5-85db-7e857492a8d2

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows Server 2022, 23H2 Edition (Server Core installation)

6899825f-b339-435b-ac43-d2138c47c80f

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows 11 Version 24H2

a66dfdb2-85d3-4291-bdc5-a740b0041f99

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows 11 version 22H3

4bb281b9-57eb-4976-a264-eaaffa7e9ba2

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows 11 Version 23H2

39b48b2b-cd68-4cc5-9e1c-81da9a54ba4b

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows Server 2016

bf016e16-ac43-4620-ab43-ff0bdb519608

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows Server 2008 Service Pack 2 (Server Core installation)

d77966eb-173f-484f-be7a-bde6ac48446c

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows 11 version 22H2

b5f64471-75c8-4ec8-a87f-7a2507ed5628

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows Server 2008 Service Pack 2

e62bc590-7eb7-4c09-93ca-7bbfea5dd864

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows Server 2008 R2 Service Pack 1

6fe743c2-d957-4064-8d87-054b345ebeb3

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows Server 2012

e91ffe81-541f-493e-ba3f-8b8d3343934c

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows Server 2008 Service Pack 2

54ae6af8-f138-4d02-96f5-2439c1a7fafd

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows Server 2025 (Server Core installation)

8d95bac8-8e14-41ae-b912-f42b24e11e28

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows Server 2012 (Server Core installation)

e7ced0f5-e017-4ab6-9cb1-c109a55eb057

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows Server 2016 (Server Core installation)

5c2a7bcb-2101-42ce-a349-463b995b7f3b

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows Server 2012 R2 (Server Core installation)

3ae8a666-9bd0-49d7-b806-eb523da65de1

has cited scope2 retained · stored CVE-2013-3900 → Microsoft · Windows 10 Version 1809

34efc1a1-95f6-4d5b-844b-40782a2312fba63a907e-5976-47a5-b2e3-d77239601528

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows Server 2025

8df7f606-8eeb-440a-8531-24e4dea7bb50

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows Server 2008 R2 Service Pack 1 (Server Core installation)

87b856b4-65a4-479d-b3db-128b67ee7dc7

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows 10 Version 22H2

194f7c8b-15b9-4f1e-859e-1673dd1b0a33

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows 10 Version 1507

12f1349a-2fbd-432d-931e-5547f26b34ea

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows 10 Version 21H2

d8b2d10f-a0cc-4341-a5f6-42c9f8aa9f1c

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows 11 version 21H2

c92ae7a5-0a8c-4025-b9ac-1a67b6ab8697

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows Server 2019

d5de9d88-5d05-40f4-a3c1-20d59875c196

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows 10 Version 1607

c292c7c0-eaa5-493e-9c2f-077555b33484

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows Server 2012 R2

35c21cc8-dfd8-4e9c-af40-c8fe12c3e6bc

has cited scope1 retained · stored CVE-2013-3900 → Microsoft · Windows Server 2019 (Server Core installation)

5de2206a-cd21-47f2-b1ee-6f12dbb47dd9

has vulnerable target scope2 retained · stored CVE-2013-3900 → microsoft · windows_11_23h2

2682850b-fc2d-4ed5-a99b-0793af78f90b67166172-1e09-4aa8-8197-b84bf6b2c36f

has vulnerable target scope1 retained · stored CVE-2013-3900 → microsoft · windows_server_2016

d5c4c0e5-6b44-4163-b6d3-8004f1ca23c3

has vulnerable target scope1 retained · stored CVE-2013-3900 → microsoft · windows_rt_8.1

0d6f7e49-f8a1-4abc-9e78-704923bfde13

has vulnerable target scope2 retained · stored CVE-2013-3900 → microsoft · windows_server_2008

33936c10-e04d-4100-b328-f8f3c4dd242f8396acd8-8c7f-4176-b0bd-be071f2114f0

has vulnerable target scope1 retained · stored CVE-2013-3900 → microsoft · windows_server_2019

cace1bdf-90c3-48af-be7a-f416117ff804

has vulnerable target scope1 retained · stored CVE-2013-3900 → microsoft · windows_server_2025

a7fa26e8-a755-451e-8f2e-b3d99d688335

has vulnerable target scope1 retained · stored CVE-2013-3900 → microsoft · windows_10_20h2

3bd75840-2c80-4a33-a1da-0c0efc9e26cc

has vulnerable target scope2 retained · stored CVE-2013-3900 → microsoft · windows_server_2012

7e333ee6-3f08-4ad6-9e84-31db5c67a9559a2fcd99-312f-4cd8-987e-92db4ce8e297

has vulnerable target scope2 retained · stored CVE-2013-3900 → microsoft · windows_10_1607

5dddd2f9-f97f-4bb0-b0cf-5f555a3f43ebf1f2be0c-9a85-489a-8685-cf3a14084e62

has vulnerable target scope1 retained · stored CVE-2013-3900 → microsoft · windows_8.1

96e54860-f203-411f-804f-74be57c24a38

has vulnerable target scope2 retained · stored CVE-2013-3900 → microsoft · windows_11_21h2

111f4c45-c8d8-4fb0-b95b-846c5df8fc2216172719-58a9-4318-9be4-ba7afdcd401b

has vulnerable target scope2 retained · stored CVE-2013-3900 → microsoft · windows_11_24h2

e2325f67-6abb-401a-9792-7dcb0c80183aff6f046d-8d2f-4173-b04c-b55f02374add

has vulnerable target scope1 retained · stored CVE-2013-3900 → microsoft · windows_10_1507

6ec2ca83-4523-4172-933a-a1ea73b32cbe

has vulnerable target scope3 retained · stored CVE-2013-3900 → microsoft · windows_10_1809

26be247f-ac04-4ec7-a65e-82d12630d6599463a017-8dab-423d-a44c-76e2f94eb673e5e76ee8-4913-4eab-9246-ffcc07a4d281

has vulnerable target scope1 retained · stored CVE-2013-3900 → microsoft · windows_10_22h2

09028e7d-621d-4bb3-abc8-bfb24c52bf1f

has vulnerable target scope1 retained · stored CVE-2013-3900 → microsoft · windows_server_2022_23h2

ca5ddb1e-d4aa-4545-9cdc-de4683bc7641

has vulnerable target scope1 retained · stored CVE-2013-3900 → microsoft · windows_server_2022

4c9e654f-92f8-48af-90f4-ee30e7e321cd

has vulnerable target scope1 retained · stored CVE-2013-3900 → microsoft · windows_10_21h1

1c0ee93b-1107-4b48-8623-3ad5f24c1a9a

has vulnerable target scope1 retained · stored CVE-2013-3900 → microsoft · windows_10_21h2

0b951a27-a539-411f-abbf-fdaa94fd6f6e

has vulnerable target scope1 retained · stored CVE-2013-3900 → microsoft · windows_10_1909

cd947955-2912-4256-aa3a-e95a103cac9c

has vulnerable target scope1 retained · stored CVE-2013-3900 → microsoft · windows_7

8d4bb1ee-f977-4327-82ac-2ebac4235499

has vulnerable target scope2 retained · stored CVE-2013-3900 → microsoft · windows_11_22h2

706ba10e-3019-4b5b-bb1d-e393303ea11daa388854-3a46-4d66-9ba6-65977e133598

Focused snapshot evidence neighborhood.

CVEProductSignalSelected / traceVisual proximity carries zero evidence weight.

Data as of

Evidence current through Oct 22, 2026, 6:07 PM UTC · 50 entities · 49 relationships · bounded complete