Vulnerabilitycritical

Critical Microsoft Code-Execution Vulnerability

Schneier on Securityby Bruce SchneierDec 22, 2022 · 12:01 UTC (Dec 22, 2022)1 min read3

Read at schneier.com

Analyze CVE-2022-37958 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-37958

Tags: cve-2022-37958 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-37958	SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability	8.1	86%		Sep 13, 2022

From the original article

1 min read at schneier.com

A critical code-execution vulnerability in Microsoft Windows was patched in September. It seems that researchers just realized how serious it was (and is): Like EternalBlue, CVE-2022-37958, as the latest vulnerability is tracked, allows attackers to execute malicious code with no authentication required.

Schneier on Security

By Bruce Schneier · schneier.com

Read the full article at Schneier on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.