CVE-2025-47981

Name of the Vulnerable Software and Affected Versions Windows (affected versions not specified) Windows Server (affected versions not specified)

Description A heap-based buffer overflow exists in the Windows SPNEGO Extended Negotiation (NEGOEX) security mechanism. This issue occurs due to an out-of-bounds memory read, which allows an unauthorized remote attacker to execute arbitrary code over a network. The flaw is characterized as wormable, meaning it can spread rapidly across vulnerable systems. Successful exploitation can grant the attacker full control over the system with SYSTEM privileges.

Recommendations Apply the Microsoft security updates released in the July 2025 Patch Tuesday, specifically update KB5062553. Restrict unnecessary network exposure between systems to minimize the risk of lateral movement. Enforce the principle of least privilege across the environment.