Critical RCE in Microsoft SPENGO Extended Negotiation Security Mechanism
Summary
A Critical Remote Code Execution Vulnerability in Microsoft's SPENGO Extended Negotiation Security Mechanism has been disclosed. A vendor provided patch is available to fix this flaw.
Threat Type
Vulnerability
Overview
In September 2022, Microsoft patched an information disclosure vulnerability in SPNEGO NEGOEX (CVE-2022-37958). On December 13, Microsoft reclassified the vulnerability as “Critical” severity after IBM Security X-Force Red Security Researcher Valentina Palmiotti discovered the vulnera