CVE-2026-69881
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk67th percentile - higher than 67% of all known CVEs
Summary
A null pointer dereference vulnerability in Windows IKE Extension allows an unauthorized attacker to cause a denial of service over a network.
Risk Assessment
The attack may cause unavailability of services using IKE, impacting business continuity.
Recommendation
Apply available security updates from the vendor and restrict access to IKE services from trusted networks.
Other vulnerabilities in Windows IKE Extension
See all- CVE-2026-33824CriticalActively exploited
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
- CVE-2026-83795High
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
- CVE-2026-83685Medium
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.
- CVE-2026-83522High
Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-83521Medium
An out-of-bounds read vulnerability exists in Windows IKE Extension. An authorized attacker can exploit this to disclose information over a network.
- CVE-2026-103569High
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
- CVE-2026-69587High
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
- CVE-2026-69429High
Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network.
Original NVD description (English source)
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS