Security alert for Microsoft users: CERT-In warns of critical vulnerabilities in many products

The Indian Computer Emergency Response Team (CERT-In) has issued a high-severity warning regarding critical vulnerabilities affecting a wide range of Microsoft products. 

These vulnerabilities expose users to potential risks, including unauthorised access, data breaches, and system disruptions.

List of Microsoft services affected

According to CERT-In, the vulnerabilities span across various Microsoft offerings, including:

1. Microsoft Windows (including Windows 10 and 11)
2. Microsoft Office Suite
3. Azure Cloud Services
4. Bing Search Engine
5. Microsoft Dynamics (business management solutions)
6. System Center (IT management tools)
7. Exchange Server (business email and collaboration platform)

The identified vulnerabilities could be exploited by malicious actors to gain elevated privileges on a user's system. 

This could allow attackers to steal sensitive information, bypass security measures, execute malicious code, impersonate legitimate users, or even disrupt system functionality through denial-of-service attacks.

Windows users at particular risk

CERT-In highlights critical vulnerabilities within various Windows versions, potentially allowing attackers to gain unauthorised access to a user's device and steal sensitive data.

The Indian cybersecurity agency attributes these vulnerabilities to shortcomings in existing security mechanisms within the affected software. 

Notably, the SmartScreen feature in Windows, designed to protect users from malware, may be inadvertently enabling malware infiltration due to these flaws.

Security gaps and patch recommendations

To mitigate these risks, CERT-In strongly recommends that all users of these Microsoft products promptly install the latest security updates and patches.

Updating software ensures these vulnerabilities are addressed and reduces the potential for exploitation.

Also watch: iPhone 16 Pro models could get on-device AI features with iOS 18