Detections
Analytics
CVE-2022-37958
high
Description
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
From the Tenable Blog
CVE-2022-37958: FAQ for Critical Microsoft SPNEGO NEGOEX Vulnerability
Published: 2022-12-21
Microsoft recently reclassified a vulnerability in SPNEGO NEGOEX, originally patched in September, after a security researcher discovered that it can lead to remote code execution. Organizations are urged to apply these patches as soon as possible.
References
https://www.tenable.com/blog/cve-2022-37958-faq-for-critical-microsoft-spnego-negoex-vulnerability
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37958