Microsoft posted an advisory for a critical TCP/IP Remote Code Execution vulnerability (CVE-2024-38063) this week. This vulnerability impacts all Windows systems using IPv6. IPv6 is enabled by default making it an easy target. Microsoft has labeled this vulnerability as “exploitation more likely.”

 

Microsoft has released a patch for this vulnerability but if you are unable to immediately install the Windows security updates, it’s recommended to disable IPv6 if you are able to do so.