The Indian Computer Emergency Response Team (CERT-In) has released an urgent advisory for Microsoft users, highlighting multiple critical vulnerabilities in Microsoft products. These security flaws could allow attackers to gain unauthorized access, elevate privileges, and potentially access sensitive data. It is strongly recommended that users apply the latest security updates to protect their systems from these risks.
Key Vulnerabilities in Microsoft Products
CERT-In has identified vulnerabilities in various Microsoft products, including Microsoft Windows, Microsoft Office, Microsoft Azure, Developer Tools, and Microsoft SQL Server. These issues could result in security breaches such as remote code execution and denial of service (DoS) attacks. The advisory stresses the importance of updating software immediately to prevent potential exploitation.
High Risk for Microsoft Edge Users
A separate advisory from CERT-In has revealed high-severity vulnerabilities specifically affecting Microsoft Edge (Chromium-based). The vulnerability, tracked as CIVN-2024-0316, affects versions of Microsoft Edge prior to 129.0.2792.79.
CERT-In noted, "These vulnerabilities exist in Microsoft Edge due to insufficient data validation in Mojo, inappropriate implementation in V8, and integer overflow in Layout. A remote attacker could exploit these by sending a specially crafted request to the system."
Successful exploitation could allow attackers to bypass security measures and execute arbitrary code on the targeted device. Microsoft Edge users are strongly urged to install the necessary updates to protect their systems from these vulnerabilities.
Protect Your Systems
All users of Microsoft products, especially those using Microsoft Edge, are advised to review the advisory and implement the recommended security patches immediately to prevent potential cyberattacks.
