117 matches found
PT-2026-35666
Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions prior to 1.22.3 Description An integer underflow leads to an out-of-bounds read when an application calls the gss accept sec context function on a system with a NegoEx mechanism registered in /etc/gss/mech. An...
PT-2026-35656
Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions prior to 1.22.3 Description A NULL pointer dereference occurs when an application calls the gss accept sec context function on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote...
CVE-2025-54895 SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability
...
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows SPNEGO Extended Negotiation allows an authorized attacker to elevate privileges locally...
CVE-2025-47981 SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
...
CVE-2025-21295 SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
...
CVE-2025-21295
Technical details (affected product, vulnerable component, root cause, exploit conditions, or fix) for CVE-2025-21295 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories; current data confirms only high-level vulnerability existence.
CVE-2025-21295: Use After Free
SPNEGO Extended Negotiation NEGOEX Security Mechanism Remote Code Execution Vulnerability...
Microsoft Reclassifies SPNEGO Extended Negotiation Security Vulnerability as 'Critical'
Microsoft has revised the severity of a security vulnerability it originally patched in September 2022, upgrading it to "Critical" after it emerged that it could be exploited to achieve remote code execution. Tracked as CVE-2022-37958 CVSS score: 8.1, the flaw was previously described as an...
Microsoft Windows Multiple Vulnerabilities (KB5017327)
This host is missing an important security update according to Microsoft KB5017327 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2022-37958
SPNEGO Extended Negotiation NEGOEX Security Mechanism Remote Code Execution Vulnerability...
Remote code execution
SPNEGO Extended Negotiation NEGOEX Security Mechanism Remote Code Execution Vulnerability...
CVE-2022-37958 SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
...
CVE-2022-37958
CVE-2022-37958 is a SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution vulnerability. The connected materials confirm a network-exposed RCE path via SPNEGO negotiation in affected systems, with public reporting of an upgrade from High to Critical severity by Microsoft a...
PT-2022-5749 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to the SPNEGO Extended Negotiation NEGOEX security mechanism in Microsoft Windows, which can lead to information disclosure. It allows remote attackers to...
KLA19245 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote cod...