Critical Remote Code Execution Vulnerability in SPNEGO Extended Negotiation Security Mechanism

On December 13, Microsoft reclassified the vulnerability as “Critical” severity after IBM Security X-Force Red security researcher Valentina Palmiotti discovered the vulnerability could allow attackers to remotely execute code.