Windows TCP/IP Remote Code Execution Vulnerability: What You Should Know

In August 2024, Microsoft's monthly Patch Tuesday release addressed a total of 90 vulnerabilities, nine of which were categorized as zero-days and eight of which were rated critical. Among these, one vulnerability stood out significantly from the rest: CVE-2024-38063, a flaw in the IPv6 implementation of the Windows TCP/IP stack.

What makes this vulnerability especially dangerous is that it is a zero-click, wormable remote code execution vulnerability. An attacker can remotely execute arbitrary code on an affected system without any user interaction whatsoever — no phishing click, no malicious attachment, no social engineering required. Simply having a vulnerable, network-reachable system is enough for an attacker to potentially achieve full system compromise, unauthorized data access, and exposure of sensitive information.

The vulnerability affects any Windows version that supports IPv6 and is still receiving security updates from Microsoft — in practice, this means essentially every currently supported version of Windows, since IPv6 support is built into the modern Windows networking stack and is enabled by default.