Windows exposes a serious security vulnerability, and it is recommended that all users update to the latest version of Windows as soon as possible
ChainCatcher news, according to Microsoft's official page, a serious security vulnerability has recently been disclosed in the Windows system, identified as CVE-2024-38063. This vulnerability affects all supported versions of Windows, including Windows 11, Windows 10, and several versions of Windows Server. The CVSS3.1 score for the vulnerability is 9.8, categorized as "critical." Attackers can remotely compromise devices and execute arbitrary code through specially crafted IPv6 packets. The vulnerability exists in the TCP/IP network stack of Windows and is a serious remote code execution flaw. Attackers can trigger the vulnerability and execute code remotely by repeatedly sending specially crafted IPv6 packets to Windows devices, without requiring user interaction or authentication. Microsoft strongly recommends that all users update to the latest version of Windows as soon as possible. Microsoft is releasing related patches to fix this vulnerability, and disabling IPv6 can temporarily prevent the exploitation of the vulnerability.