CVE-2025-47981

Critical · 9.8

CVSS

9.8

EPSS

41.1%

Published

Jul 8, 2025

CISA due date

—

The record

Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a network.

Ecosystem	Package	Introduced	Fixed