A critical security flaw in PHP impacts all versions installed on Windows operating systems. The TellYouThePass ransomware gang is actively exploiting this vulnerability, leading to arbitrary code execution on affected servers and potentially compromising entire systems. This flaw poses significant risks to PHP-based web applications.