High-Risk Security Alert Issued For Microsoft Windows, Office, And Azure: What Should You Do?

All Microsoft users need to bring their attention to the latest alert by the Indian government. Cert-In has issued a high-risk warning to users and organisations about multiple vulnerabilities across Microsoft products. The issues, flagged on August 18, 2025, carry a high severity rating and impact widely used software such as Windows, Microsoft Office, Dynamics, SQL Server, System Centre, Azure, and even older versions covered under Extended Security Updates (ESU). 

Cert-In, a government organisation under the Ministry of Electronics and Information Technology (MeitY), says attackers could use these flaws to steal data, crash systems, or take unauthorised control if users do not apply fixes on time.

What Products Are Affected

The vulnerabilities are not limited to one or two tools. Microsoft confirmed that Windows operating system, Office suite, browsers, SQL Server, developer tools, open-source software, and enterprise applications like Dynamics and System Centre are all on the list. Cloud services, including Azure apps and server software, are also impacted. This means the risks extend to both individual users and large organisations.

What can attackers do? According to the report, the flaws could allow attackers to gain elevated access privileges, steal sensitive information or files. Moreover, it can also execute malicious code remotely, bypass existing security controls, launch denial-of-service (DoS) attacks to crash systems, and spoof or tamper with system settings.

These capabilities make the vulnerabilities serious because they can lead to anything from data leaks to ransomware attacks or business downtime.

The concern is that the warning is aimed at both individual users and IT administrators. Security teams managing corporate networks are especially advised to take immediate action. Even home users running Windows or Office are at risk if their devices remain unpatched. The impact could range from personal data theft to enterprise-level system compromises.

What You Can Do

Microsoft has recommended that all users install the latest security updates as soon as they are available. Alongside regular patching, users and organizations should:

• Limit administrative privileges to essential accounts.
• Use strong authentication and backup systems.
• Monitor devices and networks for suspicious activity.

Staying updated with Microsoft’s official advisories is crucial, as detailed fixes and workarounds will continue to be released.