New Windows Vulnerability Impacts PCs With IPv6

Security updates are an important way to keep your devices safe, and if you have a Windows PC, you’ll definitely want to install any available updates. Microsoft is now patching a significant vulnerability caused by the IPv6 stack in Windows.

Microsoft has confirmed a critical vulnerability in its TCP/IP protocol that could allow remote attackers to execute code on all Windows systems using IPv6. The vulnerability, identified as CVE-2024-38063, is particularly concerning as IPv6 is enabled by default on most Windows installations. The flaw, discovered by Kunlun Lab’s XiaoWei, stems from an integer underflow weakness. Attackers could exploit this to trigger buffer overflows, paving the way for arbitrary code execution. XiaoWei has refrained from disclosing more details for now as to complicate malicious actors taking advantage of it.

Microsoft has classified the vulnerability as “exploitation more likely,” indicating a high probability of threat actors developing exploit code. It’s not clear if this is being exploited in the wild right now (and how widespread it is), but ideally, the problem should be patched before people actually get hurt. While disabling IPv6 can mitigate the risk, Microsoft advises against it. IPv6 is a core component of modern Windows versions, and disabling it could impact system functionality.

Dustin Childs, Head of Threat Awareness at Trend Micro’s Zero Day Initiative, also labeled it as “wormable,” meaning it could spread between vulnerable systems without user interaction. Although this isn’t the first IPv6-related vulnerability in Windows, its ease of exploitation makes it particularly dangerous. What makes a vulnerability dangerous is not only how much it can actually wreak havoc, but also how easy it is for someone to gain access to it.

If you haven’t updated your computer in a while, you’ll want to do so as soon as you get the chance before something catastrophic happens. Make sure your computer is fully updated with all the latest security patches.

Source: Bleeping Computer