New Security Flaws Found in Microsoft's Windows 7-10

[SevenOfNine]

The majority of recent serious security flaws that have been found in Microsoft operating systems are for Windows 10.


This article was just published, however, and the 3 security flaws mentioned are present in Windows 7-10:
Microsoft encourages Windows users to install essential fixes for serious TCP/IP vulnerabilities


Two of the vulnerabilities are RCE (Remote Code Execution) vulnerabilities, which are a very serious type of vulnerability.


For Windows 7 machines, are there any free patches for these vulnerabilities or possibly effective mitigations?

 

[Brink]

In addition:

Updates - TCP/IP:  CVE-2021-24074, CVE-2021-24094, and CVE-2021-24086

 

[edassange]

For Windows 7 machines, are there any free patches for these vulnerabilities or possibly effective mitigations?

Free updates are available but I don't think members are permitted to say more. A little googling will soon tell you how to obtain them though.

 

[RolandJS]

I've been using 0patch awhile now. I have the licensed version. I'm not sure if 0patch can help in this situation.

 

[SevenOfNine]

I've been using 0patch awhile now. I have the licensed version. I'm not sure if 0patch can help in this situation.

Thanks Roland.


I took a look at Micropatches - 0patch and I don't see any patches released yet for any of these issues. I hope they release some patches, and hopefully release them to all users.


Regarding the TCP/IP vulnerabilities in Windows, I'm a little unclear of the different ways one could be exposed. Certainly, if someone is on your same local network, their is an immediate issue. What I'm not clear on is if simply being connected the internet is also an issue. If you, or anyone else knows, I'm interested in learning.

 

[RolandJS]

I have no idea, so I will listen in and learn alongside you from the experiences of others.