If you have a PC with Windows 10 either Windows 11, update it right now to receive the latest security patch released by Microsoft. It resolves multiple bugs, including a zero-day vulnerability that has already been exploited and it also affects multiple versions of Windows Server.
As reported Bleeping Computerthe update that Redmond has released fixes 71 security flaws. These included several vulnerabilities that allowed elevation of privileges, remote code execution, and denial of service attacks.
Regarding the zero-day vulnerability, Microsoft indicates on its website that it was discovered by Crowdstrike. However, no further specificities are provided in this regard. The company only mentions that a malicious actor can take advantage of it to get SYSTEM permissions on the attacked computers. This is why researchers urge users to install the patch on Windows 10 and Windows 11.
In addition to the last two generations of its PC operating system, the bug identified as CVE-2024-49138 It also impacts a few editions of Windows Server. More precisely in those of 2008, 2012, 2016, 2019, 2022 and 2025. In this website you can see all versions of the affected platforms, with direct links to their respective updates.
Microsoft releases a patch to fix a serious security flaw in Windows 10 and Windows 11
If you do not have automatic updates activated on your PC, you can manually check if this security patch is already available for your computer. Regardless of whether you use Windows 10 or Windows 11, the steps to follow are the same. You just have to enter Settings > Windows Update and tap on the button “Check for updates”. Then you have to allow the software to install.
It is true that these types of updates are common in Windows 10 and Windows 11. But since this is a zero-day vulnerability for which there are already records of its use, PC protection should not be left to chance.
So far in 2024, Microsoft has released several updates for critical security flaws in Windows 10 and Windows 11. In June, for example, it resolved a flaw that allowed an attacker to access your computer if you connected to a network Public WiFi. Additionally, an issue was fixed that allowed CPU resources to be exhausted to leave the computer out of service.
In August, meanwhile, a vulnerability was discovered that could cause blue screens on virtually any PC running the latest versions of Windows. According to the researchers responsible for the discovery, it had enough potential to cause another global chaos like that of Crowdstrike.
With Windows 10 on track to be unsupported in 2025, and with the first versions of Windows 11 also out of consideration, these types of security patches should not be overlooked. Please note that Win11 edition 21H2, which is no longer officially supported, is among those that must be updated to evade the zero-day vulnerability that we tell you about in this article.
