CVE-2026-50696

HighCVSS 7.5

Published: 14/07/2026(UTC)Updated: 17/09/2026(UTC)Translated: 17/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.17%

66th percentile - higher than 66% of all known CVEs

Summary

A heap-based buffer overflow vulnerability in the Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to remotely cause a denial of service (DoS).

Risk Assessment

An attacker can remotely crash the IKE service, disrupting VPN and other services relying on this protocol.

Recommendation

Apply the security update provided by Microsoft for Windows immediately.

Other vulnerabilities in Windows IKE Protocol

CVE-2026-83843High
Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

Original NVD description (English source)

Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS