SPNEGO Vulnerability Lets Attackers Execute Code Remotely

Microsoft announced the information disclosure vulnerability in SPNEGO NEGOEX (CVE-2022-37958) had been patched in September 2022. Lately, cyber researchers discovered, and notified them, that the vulnerability permits threat actors to remotely execute code. As a result, on December 13th, Microsoft reclassified the vulnerability as “Critical” severity. Researchers warn that the patch should be applied as […]

The post SPNEGO Vulnerability Lets Attackers Execute Code Remotely appeared first on Heimdal Security Blog.

attackers code cybersecurity news spnego vulnerability