Government is issuing a “warning” to users of Windows 10, Windows 11, Office and other Microsoft products
The Computer Emergency Response Team (CERT-in) has issued an alert to users of various Microsoft products, including Windows 10, Windows 11 and Microsoft Office. Cybersecurity watchdogs have reported that Microsoft Windows products contain security bypass vulnerabilities that can be exploited by attackers to compromise target systems.
This agency, under the Ministry of Electronics and Information Technology, has classified this vulnerability as “critical” on its severity scale.
“Several vulnerabilities have been reported in Microsoft Windows that could allow an attacker to execute arbitrary code, bypass security features and compromise a target system,” Cert-In said.
According to the agency, the vulnerability is due to improper access restrictions in the proxy driver and poor implementation of the Mark of the Web (MoW) feature in Microsoft Windows.
He added: “Protections in the SmartScreen security feature bypass the Mark of the Web (MotW) feature and allow malware to execute on the target system. An attacker could exploit this vulnerability by sending a specially crafted abuse request. It can be abused.” ”
Which Microsoft products are vulnerable?
Products include Microsoft Windows, Microsoft Office, Developer Tools, Azure, Browser, System Center, Microsoft Dynamics and Exchange Server.
The agency recommended users apply the appropriate security updates as described in the company’s update guide.
Earlier this year, CERT-in warned Windows 10 and Windows 11 users about a vulnerability in the Microsoft Windows kernel that could be exploited by an attacker to gain elevated privileges on a target system.
The vulnerability was discovered on both 32-bit and x64-based systems and is rated as “high” on the severity scale. This vulnerability exists in the Microsoft Windows kernel due to a flaw in a kernel component.
Bhupendra Singh Chundawat is a seasoned technology journalist with over 22 years of experience in the media industry. He specializes in covering the global technology landscape, with a deep focus on manufacturing trends and the geopolitical impact on tech companies. Currently serving as the Editor at Udaipur Kiran, his insights are shaped by decades of hands-on reporting and editorial leadership in the fast-evolving world of technology.