TechFlow news, on August 14, Microsoft disclosed a critical security vulnerability in the Windows system, designated as CVE-2024-38063, affecting all supported versions of Windows, including Windows 11, Windows 10, and multiple versions of Windows Server. The vulnerability has a CVSS3.1 score of 9.8, classified as "Critical." Attackers can remotely compromise devices via specially crafted IPv6 packets to execute arbitrary code, without requiring user interaction or authentication.
The vulnerability resides in the TCP/IP networking stack of Windows. Microsoft strongly recommends users update to the latest Windows version as soon as possible, and is releasing patches to address this issue. Disabling IPv6 serves as a temporary measure to prevent exploitation of the vulnerability.
