SecPod

Learn Search

Search across all Learn content

← Back to Security Research
Critical Vulnerabilities in Windows, CERT-In Warns Users

Critical Vulnerabilities in Windows, CERT-In Warns Users

Microsoft Windows, the world’s most widely used desktop OS, is at risk! The Indian Computer Emergency Response Team (CERT-In) has issued a high-severity alert, warning Windows users in India of several vulnerabilities in Microsoft products and urging them to update their systems immediately.

Oct 10, 2024By Meghana Raatni2 min read

Microsoft Windows, the world’s most widely used desktop OS, is at risk! The Indian Computer Emergency Response Team (CERT-In) has issued a high-severity alert, warning Windows users in India of several vulnerabilities in Microsoft products and urging them to update their systems immediately.

The vulnerabilities, dubbed CIVN-2024-0316, are present in Microsoft Edge (Chromium-based), and arise from inadequate data validation in Mojo, improper implementation in V8, and Integer overflow in Layout. A remote attacker could exploit these flaws by sending a specially crafted request to the target system. If successfully exploited, these vulnerabilities could enable a remote attacker to bypass security measures and execute arbitrary code on the affected system.

An effective patch management software instantly fix risks exploited in the wild.

Impact

An attacker could gain elevated privileges, circumvent security restrictions, access sensitive information, perform remote code execution attacks, or trigger denial of service (DoS) conditions. They could also deceive users into visiting malicious websites or opening compromised HTML pages, which exposes sensitive personal information to significant risk.

Affected Products and Solutions

Microsoft Edge (Chromium-based) before version 129.0.2792.79 is vulnerable. Other affected products include Microsoft Windows, Microsoft Office, Microsoft Azure, Developer Tools, and Microsoft SQL Server.

CERT-In recommends that users apply security updates at the earliest.

Instantly Fix Risks with SanerNow Patch Management

SanerNow patch management is a continuous, automated, and integrated software that instantly fixes risks exploited in the wild. The software supports major operating systems like Windows, Linux, and macOS, as well as 550+ third-party applications.

It also allows you to set up a safe testing area to test patches before deploying them in a primary production environment. SanerNow patch management additionally supports a patch rollback feature in case of patch failure or a system malfunction.

Experience the fastest and most accurate patching software here.

Featured Posts

Open WHIPSHOT and SLAPSHOT: Citrix NetScaler Zero-Days Exploited to Plant Root Web Shells and Internal Tunnels
WHIPSHOT and SLAPSHOT: Citrix NetScaler Zero-Days Exploited to Plant Root Web Shells and Internal Tunnels

CVE Research

WHIPSHOT and SLAPSHOT: Citrix NetScaler Zero-Days Exploited to Plant Root Web Shells and Internal Tunnels

Oct 1, 2026

Open OpenSSL’s DTLS State Handling Error Opens the Door to Heap Data Exposure
OpenSSL’s DTLS State Handling Error Opens the Door to Heap Data Exposure

CVE Research

OpenSSL’s DTLS State Handling Error Opens the Door to Heap Data Exposure

Oct 1, 2026

Open Patch Analysis & Exploitation Timeline: Critical WSO2 and Adobe Flaws Show 1-Day vs. 133-Day Exploitation Window , September 24, 2026 KEV Additions
Patch Analysis & Exploitation Timeline: Critical WSO2 and Adobe Flaws Show 1-Day vs. 133-Day Exploitation Window , September 24, 2026 KEV Additions

CVE Research

Patch Analysis & Exploitation Timeline: Critical WSO2 and Adobe Flaws Show 1-Day vs. 133-Day Exploitation Window , September 24, 2026 KEV Additions

Two critical vulnerabilities added to CISA KEV on September 24, 2026 reveal sharply different exploitation timelines. CVE-2026-71362 saw publicly documented exploitation roughly one day after Adobe's patch release, while CVE-2026-5430 had a 133-day vendor-remediation-to-observed-exploitation interval.

Oct 1, 2026

Open Patch Analysis & Exploitation Timeline: Same-Week KEV Additions, Year-Apart Patch Dates - Linux Kernel, September 18, 2026
Patch Analysis & Exploitation Timeline: Same-Week KEV Additions, Year-Apart Patch Dates - Linux Kernel, September 18, 2026

CVE Research

Patch Analysis & Exploitation Timeline: Same-Week KEV Additions, Year-Apart Patch Dates - Linux Kernel, September 18, 2026

Three Linux kernel vulnerabilities entered CISA’s KEV catalog on September 18, 2026, although their Linux 6.12 fixes were available 91–386 days earlier. This analysis separates patch availability, CVE publication, and known-exploitation status without treating KEV dates as first-attack dates.

Sep 28, 2026