Windows 10 users are urged to download the latest update due to critical fixes for six actively exploited vulnerabilities affecting up to 240 million individuals. The U.S. Cyber Defense Agency advises updating systems before April 1st or turning off computers as a precaution. The vulnerabilities include:
- CVE-2025-24993: Buffer overflow exploit.
- CVE-2025-24991: Access to data from a malicious virtual hard disk.
- CVE-2025-24984: Exploit requiring physical access to log sensitive information.
- CVE-2025-26633: Bypass flaw in Microsoft Management Console.
- CVE-2025-24985: Privilege escalation flaw after mounting a VHD.
- CVE-2025-24983: System-level exploit for gaining top privileges on the Windows Kernel Subsystem.
Over 600 organizations have been affected by these vulnerabilities. Microsoft will cease security updates for Windows 10 on October 14th, 2025, and users are encouraged to transition to Windows 11. Currently, there is a 60/40 split between Windows 10 and 11 users, with only 2% switching monthly. Approximately 240 million users have PCs incompatible with Windows 11, potentially leading to 1.1 billion pounds of computing equipment being discarded. The slow migration poses risks to user data security.