Microsoft Discovers 'Critical' Windows 10 Vulnerabilities Affecting 800M
%2Favatars%2F6UKotck4r9pz.jpg&w=96&q=75)
%2Fimg%2Fiea%2FMRw4XEzJw1%2Fwindows-10.jpg&w=3840&q=75)
In a recent Security Response Center update from Microsoft, the company detailed the discovery of two "critical" Remote Code Execution (RCE) vulnerabilities.
The vulnerabilities are "wormable", meaning that any future malware that exploits these could jump from computer to computer without any need for users sending it across.
RELATED: MICROSOFT JOINS APPLE, AMAZON AS $1 TRILLION COMPANY
'Wormable' vulnerabilities
The nature of the RCE vulnerabilities means that they can propagate without need for user action. As Forbes reports, this is particularly worrying as it means the vulnerability could affect hundreds of millions of Windows 10 computers.
According to Microsoft, an attacker who successfully exploits the vulnerability could execute arbitrary code on the target system. They could then install programs, delete data, and even create new accounts with full user rights.
In a statement, Simon Pope, Microsoft’s Director of Incident Response, confirmed that the vulnerabilities affect "all supported versions of Windows 10, including server versions."
Pope also confirmed that the vulnerability could affect Windows 7 SP1, Windows Server 2008 R2 SP1, Windows Server 2012, Windows 8.1, and Windows Server 2012 R2 users.
Microsoft Windows 10 users are estimated at 800 million, the company says.
Patches already available
Pope stated that "it is important that affected systems are patched as quickly as possible.”
A patch is available at CVE-2019-1181 and CVE-2019-1182. Look for your Windows version in the 'Security Updates' section and download the corresponding patch.
These will very soon be installable via Windows Update, however, if it is not yet available at the time of reading, it's better to be safe and install the patch as soon as possible.
BlueKeeps I & II
The new bugs are being widely compared to the BlueKeep vulnerability - also "wormable" - that was discovered and patched in May of this year.
ZDNet is referring to them as BlueKeep I & II.
SHOW COMMENT (1)
/2023/09/27/image/jpeg/hU07XtyG7GvSo5QfCALfndeNFpZceMzzMBKd89Tc.jpg "Mihai Gruieti: ‘AI doesn’t take jobs, it transforms them’")
/2023/09/27/image/jpeg/oOwQ2G6YcZaRWCbmOZAVQrmrJFo7Z8sNE0BWsYFO.jpg "NASA's Chandra gives new insights into 1840s Great Eruption")
/2023/07/28/image/jpeg/dFsuWVob5MupWCOVN9MonuzEXMUIG0JHv96G7w8C.jpg "Could a gene switch off anxiety?")
/2023/08/03/image/jpeg/i0WvKwEJutV6HfpsUjLkvcQrUxGU6Pps70ufIeE4.jpg "A \"lost world\" from a billion years ago discovered")
/2023/09/28/image/jpeg/g3ouqtOZSbJDnnzGlndLfUf5W87Ty95Rn0dj3ect.jpg "Huge star unleashes surprising mass prior to supernova")
/2023/09/22/image/jpeg/N09BSEVNiNkMLnA50kD8o3yiMP8ye1mAEFwtWa4G.jpg "Is carbon capture the missing piece in the net zero puzzle?")
/2023/07/25/image/jpeg/FmiX8wihzsK5QlLyCAvLuWG8mFQPJq6DlJVhmaMW.jpg "Bridging the gap between doctors and medical technology")
/2023/08/25/image/png/5hf1N5LFzyDY4pUpvoJ0BtpujwCPfsL68t1cAIVj.png "Why is anti-piracy software Denuvo stirring controversy?")
/2023/08/27/image/jpeg/fi494iLoRqITLtvrXotofLEJk8JZH1s8Z3Upge1M.jpg "Gallant ships: 5 underdogs of the seas that punched above their weight")
/2023/09/28/image/jpeg/MXYYGjoX4W8DzvPyOrUTc38RRejn6VoEwjNGcwBx.jpg "US intelligence agencies may get AI intel bots soon")