NSA warns that 'BlueKeep' vulnerability in Windows XP and Windows 7 is especially dangerous

Microsoft has issued a BlueKeep patch for Windows 7, and in an unusual step, for Windows XP as well.

The National Security Agency is warning users that a recent vulnerability affecting Windows 7 and Windows XP systems is potentially “wormable,” meaning that it could be exploited and weaponized by malware.

Microsoft issued an alert in mid-May about a Remote Code Execution vulnerability, known as CVE-2019-0708, that can affect  Windows 7, Windows XP, Windows 2003, Windows Server 2008 R2, and Windows Server 2008. Since then, the vulnerability has been nicknamed “BlueKeep.” Microsoft issued a BlueKeep patch for Windows 7, and another BlueKeep patch for Windows XP. Microsoft strongly urges users to patch affected systems.

That’s because code designed to exploit the vulnerability could spread pre-authentication and without any user interaction. These are prime breeding conditions for a worm similar to the spread of WannaCry, Microsoft warned. WannaCry took down millions of computers in 2017, using an unsophisticated yet pervasive attack that infected computers with ransomware. 

The National Security Agency is concerned that this could happen again. “This is the type of vulnerability that malicious cyber actors frequently exploit through the use of software code that specifically targets the vulnerability,” the NSA wrote. “For example, the vulnerability could be exploited to conduct denial of service attacks. It is likely only a matter of time before remote exploitation code is widely available for this vulnerability. NSA is concerned that malicious cyber actors will use the vulnerability in ransomware and exploit kits containing other known exploits, increasing capabilities against other unpatched systems.”

Though more than two weeks have elapsed since the vulnerability was discovered, Microsoft warned that cybercriminals often don’t move that quickly. EternalBlue, the vulnerability that allowed WannaCry to take place, took a total of two months from the time that the vulnerability was discovered to the time it took to exploit it. “Despite having nearly 60 days to patch their systems, many customers had not,” Microsoft said

Naturally, Microsoft is taking the opportunity to encourage customers to migrate from older operating systems to Microsoft’s latest OS, Windows 10. Though Microsoft took the unusual step of publishing a BlueKeep patch for Windows XP, Windows 7 ends its support lifespan this coming January.

“Customers running Windows 8 and Windows 10 are not affected by this vulnerability, and it is no coincidence that later versions of Windows are unaffected,” Microsoft wrote. “Microsoft invests heavily in strengthening the security of its products, often through major architectural improvements that are not possible to backport to earlier versions of Windows. “

Join the newsletter!


Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags Windows 7windows xp

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.
Mark Hachman

Mark Hachman

PC World (US online)
Show Comments

Most Popular Reviews

Latest Articles


PCW Evaluation Team

Cate Bacon

Aruba Instant On AP11D

The strength of the Aruba Instant On AP11D is that the design and feature set support the modern, flexible, and mobile way of working.

Dr Prabigya Shiwakoti

Aruba Instant On AP11D

Aruba backs the AP11D up with a two-year warranty and 24/7 phone support.

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Tom Sellers


This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang


It really doesn’t get more “gaming laptop” than this.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?