Microsoft Windows SPNEGO Extended Negotiation Privilege Escalation Vulnerability

A vulnerability allowing local privilege escalation has been identified in the SPNEGO Extended Negotiation security mechanism of Windows. This issue arises from an integer overflow or wraparound, which could be exploited by an authorized attacker to gain elevated privileges. The vulnerability affects several versions of Windows, including various releases of Windows Server and Windows 10, as well as Windows 11.

Impact

Exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5065427, KB5065431, KB5065428, and KB5065509.