CVE-2026-69587
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk67th percentile - higher than 67% of all known CVEs
Summary
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
Risk Assessment
An attacker could cause the IKE service to crash, leading to disruption of VPN or other dependent services.
Recommendation
Apply security updates for Windows IKE Extension.
Other vulnerabilities in Windows IKE Extension
See all- CVE-2026-33824CriticalActively exploited
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
- CVE-2026-83795High
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
- CVE-2026-83685Medium
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.
- CVE-2026-83522High
Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-83521Medium
An out-of-bounds read vulnerability exists in Windows IKE Extension. An authorized attacker can exploit this to disclose information over a network.
- CVE-2026-103569High
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
- CVE-2026-69881High
A null pointer dereference vulnerability in Windows IKE Extension allows an unauthorized attacker to cause a denial of service over a network.
- CVE-2026-69429High
Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network.
Original NVD description (English source)
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS