Urgent Security Alert: Critical Vulnerabilities in Windows 11 and 10 Exposed

---

The Indian Computer Emergency Response Team (CERT-In) has recently issued urgent warnings regarding two significant security vulnerabilities impacting Windows PCs. Classified as 'Critical,' these flaws primarily affect users of Windows 11. The CERT-In has emphasized the urgency of addressing these issues to prevent potential exploitation by cybercriminals .

Overview of the Vulnerabilities​

1. Windows TCP/IP Remote Code Execution Vulnerability​

The first critical flaw is associated with Windows PCs connected to the Internet Protocol version 6 (IPv6). This vulnerability pertains to remote code execution, which can potentially allow attackers to run arbitrary code on the affected system. According to CERT-In, hackers could exploit this weakness by sending specially crafted IPv6 packets, which might initiate unauthorized actions within the computer .

Affected Systems​

• Windows 10: All versions
• Windows 11: All versions
• Windows Server 2016 and later Root Cause: This security issue stems from an 'Integer Underflow' weakness that can lead to a buffer overflow condition. Essentially, an unauthenticated attacker can exploit this by repeatedly sending forged IPv6 packets, creating an incurable breach that may result in severe system damage .
  

  2. Windows Kernel Vulnerability​

  The second flaw involves a critical vulnerability in the Windows Kernel, which could also permit attackers to execute arbitrary code and gain elevated privileges on affected systems. This flaw has reportedly been used in the wild, highlighting its urgent severity .
  

  Affected Systems​

• Windows 10: Versions 1607, 1809, 21H2, and 22H2
• Windows 11: Versions 21H2, 22H2, 23H2, and 24H2
• Windows Server 2016 (including Server Core installation)
• Windows Server 2019 (including Server Core installation)
• Windows Server 2022 (including 23H2 Edition and Server Core installation) Mechanism: This vulnerability arises from a race condition in the Windows Kernel, which could allow an attacker to escalate their privileges within the affected system .
  

  Precautions and Recommendations​

  Immediate Recommendations​

  To mitigate the risks posed by these vulnerabilities, CERT-In recommends the following steps:
• Disable IPv6: Users are advised to disable IPv6 on their devices if it is not in use. This simple step can significantly reduce exposure to potential attacks leveraging the TCP/IP flaw.
• Install Updates: Ensure that the latest security patches provided by Microsoft are installed. Users should check for updates routinely. Navigate to Settings → Update & Security → Windows Update, and select Check for updates .
  

  Reinforce Security Practices​

  1. Regular Software Updates: Maintaining up-to-date software is crucial for securing your operating system against newly discovered vulnerabilities. Ensure that all applications and Windows itself are updated regularly.
  2. Use Strong Passwords: Elevate security by implementing strong, unique passwords for all accounts. Utilizing password managers can assist in managing complex passwords .
  3. Enable Firewalls: Ensure Windows Defender Firewall is active, as this can help block unauthorized access to your computer.
  4. Antivirus Software: Deploy reputable antivirus software to offer additional protection against malware and vulnerabilities.
  5. Educate on Phishing: Users should be wary of phishing scams, especially targeted emails that might be looking to exploit these vulnerabilities. Always verify the authenticity of emails before clicking on any links .
     

     Conclusion​

     The recent findings from CERT-In highlight the continuous need for vigilance among Windows users. As cyber threats evolve, so too must user awareness and precautionary measures. By following the outlined recommendations, Windows PC users can significantly mitigate their risk exposure while maintaining a secure digital presence . Keeping systems updated, being aware of security best practices, and recognizing the telltale signs of malicious activity are fundamental steps in safeguarding technology infrastructure. For those affected, immediate action is essential to maintain system integrity and protect personal data. Users must take responsibility for their security by implementing these measures and staying informed about potential updates from Microsoft.​

     For more details on the vulnerabilities and recommended actions, check the source article on Moneycontrol: Moneycontrol.