Microsoft Patches 130 Vulnerabilities, Including Critical Flaws in SPNEGO and SQL Server

For the first time in 2025, Microsoft's Patch Tuesday updates did not bundle fixes for exploited security vulnerabilities, but the company acknowledged one of the addressed flaws had been publicly known. The patches resolve a whopping 130 vulnerabilities, along with 10 other non-Microsoft CVEs th...

CVE-2025-47981

Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a network...

CVE-2025-47981

Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a network...

CVE-2025-47981 SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

...

CVE-2025-47981

CVE-2025-47981 is a heap-based buffer overflow in Windows SPNEGO Extended Negotiation that enables pre-auth remote code execution over the network. It affects Windows clients (e.g., Windows 10 1607+) and Windows Server platforms. The initial doc provides a 9.8 CVSSv3.1 score (NETWORK, NONE/LOW/NO...

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a network...

CVE-2025-47981: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a network...

PT-2025-55152

Уязвимость функции get mech set компонента spnego mech.c сетевого протокола аутентификации Kerberos связана с чтением за допустимыми границами буфера данных. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

CVE-2021-21335

In the SPNEGO HTTP Authentication Module for nginx spnego-http-auth-nginx-module before version 1.1.1 basic Authentication can be bypassed using a malformed username. This affects users of spnego-http-auth-nginx-module that have enabled basic authentication. This is fixed in version 1.1.1 of...

ROS-2-596

2.596 Multiple vulnerabilities in ISC BIND CVE-2021-25216, CVE-2021-25215, CVE-2021-25214 1. Vulnerability Description: CVE-2021-25216 A vulnerability exists due to a boundary error in the GSS-TSIG extension. A remote attacker can send specially crafted requests to the server, trigger a buffer...

Microsoft Patch Tuesday for January 2025 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for January of 2025 which includes 159 vulnerabilities, including 12 that Microsoft marked as "critical." The remaining vulnerabilities listed are classified as "important." One notable critically rated vulnerability that has been patched this...

CVE-2025-21295

SPNEGO Extended Negotiation NEGOEX Security Mechanism Remote Code Execution Vulnerability...

CVE-2025-21295 SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

...

CVE-2025-21295 SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

...

CVE-2025-21295

Technical details (affected product, vulnerable component, root cause, exploit conditions, or fix) for CVE-2025-21295 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories; current data confirms only high-level vulnerability existence.

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

...

PT-2025-1166

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a remote code execution vulnerability in the SPNEGO Extended Negotiation NEGOEX security mechanism. It is associated with the use of memory after it has been freed,...

CVE-2025-21295: Use After Free

SPNEGO Extended Negotiation NEGOEX Security Mechanism Remote Code Execution Vulnerability...

Microsoft SPNEGO Extended Negotiation 资源管理错误漏洞

Microsoft SPNEGO Extended Negotiation is a SPNEGO extension from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft SPNEGO Extended Negotiation. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

Security Bulletin: Vulnerability in Apache Hadoop affects watsonx.data

Summary For CVE-2018-11768, a remote hacker could exploit a vulnerability in Apache Hadoop caused by a mismatch in the size of the fields used to store user/group information between memory and disk representation. For CVE-2020-9492, a remote attacker could gain elevated privileges on the system,...