"Microsoft Uncovers Critical RCE Vulnerability in Helix Core Server, Posing System Control Risk"
Microsoft has discovered four vulnerabilities, including one critical flaw, in the widely used Perforce Helix Core Server, a source code management platform. The vulnerabilities mainly involve denial of service issues, with the most severe allowing unauthenticated attackers to execute arbitrary code as LocalSystem. Microsoft has not observed any exploitation attempts in the wild but recommends users to upgrade to the latest version to mitigate the risk. The remaining vulnerabilities can cause operational disruption. Microsoft suggests regular software updates, access restriction, TLS certificates, logging, crash alerts, and network segmentation for protection.