Microsoft has issued an alert regarding multiple critical security vulnerabilities identified in Microsoft Windows and Microsoft Office that could allow systems to be compromised through a single click or by opening a file. The company has released patches and advised users to update immediately.
The company confirmed that recently identified zero-day vulnerabilities in Windows and Office had already been exploited by hackers. These vulnerabilities exposed users to one-click attacks through unknown links or files.
Microsoft stated that certain flaws in Windows and Office were severe enough to enable attackers to gain system access by persuading users to click on a malicious link or open an Office file.
The company said that methods to exploit these vulnerabilities had already become public, increasing the risk. In such cases, users may remain unaware while malware installs in the background.
Microsoft classified the bugs as zero-day vulnerabilities, meaning hackers were aware of and exploiting them before fixes were issued.
Cybersecurity experts state that zero-day vulnerabilities are dangerous because users have no immediate protection against them. Until patches are released, systems remain fully exposed.
Microsoft said that the necessary security updates to address the vulnerabilities have now been released. All users have been advised to update their Windows and Office software without delay. Users with auto-update disabled should manually check for updates.
Users have also been advised to avoid clicking on unknown links, opening suspicious email attachments, and downloading files unnecessarily. Maintaining updated antivirus software and following basic cyber hygiene practices can reduce the risk of such attacks.
