Microsoft has announced a new security notice encouraging Windows users to update their devices as soon as possible after the company detected a critical security vulnerability in the web browser Internet Explorer. The tech company pushed out a patch for the security issue to prevent in from attacking users' devices.
The vulnerability which has already exploited many devices allows hackers to run malicious codes to remotely through the Internet Explorer. Among the affected versions are Internet Explorer 7 to 11 on Windows 7, 8, 8.1, 10 and Vista. One the bright side, the new Microsoft Edge is not included in the list which means it is not affected by the threat.
The improper accessing objects in memory of the Internet Explorer caused the vulnerability. As a result, the memory is corrupted giving way for hackers to run codes with the current privileges of the user. Hackers can exploit devices in various means. They can then control the computer to install and remove programs or modify files.
Hackers can also create web pages, web advertisements or HTML emails remotely. The attackers will have the right to be the current user and will completely take over the system.
Experts rated the vulnerability as 'critical' for all client operating systems while 'moderatre' for all server operating systems of the tech company. The Windows Server Technical Preview is affected by the said threat including Windows Server 2008, 2012 and 2012 R2. The Enhanced Security Configuration of the browser helped minimized the damaged on the devices.
Microsoft has already issued patches for the affected versions of Windows to address the problem. The patches which are already available on Windows Update and Download Center enable both the users and the administrators to update their devices immediately.
This is the second emergency that the company has issued. Earlier, Microsoft also released an emergency fix for all devices supported by the Windows operating system to disable hackers from infecting the victims' computer with malware.
