CVE-2026-69429
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk50th percentile - higher than 50% of all known CVEs
Summary
Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network.
Risk Assessment
An authorized remote attacker could execute arbitrary code, potentially leading to full system compromise.
Recommendation
Apply Windows security updates to prevent remote code execution.
Other vulnerabilities in Windows IKE Extension
See all- CVE-2026-33824CriticalActively exploited
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
- CVE-2026-83795High
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
- CVE-2026-83685Medium
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.
- CVE-2026-83522High
Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-83521Medium
An out-of-bounds read vulnerability exists in Windows IKE Extension. An authorized attacker can exploit this to disclose information over a network.
- CVE-2026-103569High
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
- CVE-2026-69881High
A null pointer dereference vulnerability in Windows IKE Extension allows an unauthorized attacker to cause a denial of service over a network.
- CVE-2026-69587High
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
Original NVD description (English source)
Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS