SecPod

Learn Search

Search across all Learn content

← Back to Security Research
Critical Vulnerabilities in Windows, CERT-In Warns Users

Critical Vulnerabilities in Windows, CERT-In Warns Users

Microsoft Windows, the world’s most widely used desktop OS, is at risk! The Indian Computer Emergency Response Team (CERT-In) has issued a high-severity alert, warning Windows users in India of several vulnerabilities in Microsoft products and urging them to update their systems immediately.

Oct 10, 2024By Meghana Raatni2 min read

Microsoft Windows, the world’s most widely used desktop OS, is at risk! The Indian Computer Emergency Response Team (CERT-In) has issued a high-severity alert, warning Windows users in India of several vulnerabilities in Microsoft products and urging them to update their systems immediately.

The vulnerabilities, dubbed CIVN-2024-0316, are present in Microsoft Edge (Chromium-based), and arise from inadequate data validation in Mojo, improper implementation in V8, and Integer overflow in Layout. A remote attacker could exploit these flaws by sending a specially crafted request to the target system. If successfully exploited, these vulnerabilities could enable a remote attacker to bypass security measures and execute arbitrary code on the affected system.

An effective patch management software instantly fix risks exploited in the wild.

Impact

An attacker could gain elevated privileges, circumvent security restrictions, access sensitive information, perform remote code execution attacks, or trigger denial of service (DoS) conditions. They could also deceive users into visiting malicious websites or opening compromised HTML pages, which exposes sensitive personal information to significant risk.

Affected Products and Solutions

Microsoft Edge (Chromium-based) before version 129.0.2792.79 is vulnerable. Other affected products include Microsoft Windows, Microsoft Office, Microsoft Azure, Developer Tools, and Microsoft SQL Server.

CERT-In recommends that users apply security updates at the earliest.

Instantly Fix Risks with SanerNow Patch Management

SanerNow patch management is a continuous, automated, and integrated software that instantly fixes risks exploited in the wild. The software supports major operating systems like Windows, Linux, and macOS, as well as 550+ third-party applications.

It also allows you to set up a safe testing area to test patches before deploying them in a primary production environment. SanerNow patch management additionally supports a patch rollback feature in case of patch failure or a system malfunction.

Experience the fastest and most accurate patching software here.

Featured Posts

Open Cisco FMC Zero-Day Under Active Attack: UAT-12197, UAT-11823 and Qilin-Linked UAT-11988 Exploit Firewall Flaws
Cisco FMC Zero-Day Under Active Attack: UAT-12197, UAT-11823 and Qilin-Linked UAT-11988 Exploit Firewall Flaws

CVE Research

Cisco FMC Zero-Day Under Active Attack: UAT-12197, UAT-11823 and Qilin-Linked UAT-11988 Exploit Firewall Flaws

Sep 11, 2026

Open CVE-2026-87491: Google Patches Seventh Actively Exploited Chrome Zero-Day of 2026
CVE-2026-87491: Google Fixes 7th Exploited Chrome Zero-Day of 2026

CVE Research

CVE-2026-87491: Google Patches Seventh Actively Exploited Chrome Zero-Day of 2026

Sep 10, 2026

Open Microsoft's September 2026 Patch Tuesday: 973 Vulnerabilities, Two Exploited Zero-Days and a Record Security Release
Microsoft's September 2026 Patch Tuesday: 973 Vulnerabilities, Two Exploited Zero-Days and a Record Security Release

CVE Research

Microsoft's September 2026 Patch Tuesday: 973 Vulnerabilities, Two Exploited Zero-Days and a Record Security Release

Microsoft's September 2026 Patch Tuesday addresses 973 vulnerabilities across Windows, Office, infrastructure services, virtualization components and other Microsoft products.

Sep 9, 2026

Open MikroTik RouterOS Under Attack: Critical SSH Vulnerabilities Enable Router Takeover
MikroTik RouterOS Under Attack: Critical SSH Vulnerabilities Enable Router Takeover

CVE Research

MikroTik RouterOS Under Attack: Critical SSH Vulnerabilities Enable Router Takeover

Sep 8, 2026