vsociety

CVEs

CVE-2024-38063

9.8 Critical Severity

xtranslation

Microsoft has released an urgent security update to address a critical remote code execution vulnerability in the Windows TCP/IP stack. The flaw affects all versions of Windows. An attacker can remotely exploit this vulnerability by sending specially crafted IPv6 packets to a target host, no user interaction is required, making this a “0-click” vulnerability. Microsoft recommends disabling IPv6 if it is not needed as successful exploitation could allow an attacker to execute arbitrary code on the target system with SYSTEM privileges. This level of access would give the attacker full control over the compromised machine.
Given the critical nature of this vulnerability and its potential widespread impact, organizations should treat remediation as a top priority.

@eaguilar

1 post

Total vcoins

350

Comments (1)