HawkInsight

  • Contact Us
  • App
  • English

"Windows re-exposed serious security vulnerabilities, without user authentication through IPV6 intrusion

8月14日消息,据微软官方披露,近日,Windows系统曝出严重安全漏洞,编号为CVE-2024-38063,该漏洞影响所有受支持的Windows版本,包括Windows11、Windows10以及多个版本的WindowsServer。漏洞的CVSS3.1分数为9.8,属于「重要」级别,攻击者可以通过特制的IPv6数据包远程入侵设备,执行任意代码。该漏洞存在于Windows的TCP/IP网络堆栈中,是一个严重的远程代码执行漏洞。 攻击者可以通过反复向Windows设备发送特制的IPv6数据包,触发漏洞并远程执行代码,无需用户交互或身份验证。微软强烈建议所有用户尽快更新至最新的Windows版本。微软正在发布相关补丁以修复此漏洞,禁用IPv6可临时防止漏洞被利用。

Disclaimer: The views in this article are from the original Creator and do not represent the views or position of Hawk Insight. The content of the article is for reference, communication and learning only, and does not constitute investment advice. If it involves copyright issues, please contact us for deletion.

NewFlashHawk Insight
More