CVE-2022-37958: Microsoft Elevates Severity of SPNEGO NEGOEX Vulnerability

On December 13, as part of its December 2022 Patch Tuesday release, Microsoft updated an advisory for CVE-2022-37958, a vulnerability in the SPNEGO Extended Negotiation (NEGOEX) Security Mechanism that was patched in September. 

In its update, Microsoft elevated the severity, impact and CVSSv3 score for CVE-2022-37958:

• Severity: High to Critical
• Impact: Information Disclosure to Remote Code Execution
• CVSSv3 Score: 7.5 to 8.1

For more information about the vulnerability, including Tenable product coverage, please visit our FAQ blog post for CVE-2022-37958.