CVE-2026-83521
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk62th percentile - higher than 62% of all known CVEs
Summary
An out-of-bounds read vulnerability exists in Windows IKE Extension. An authorized attacker can exploit this to disclose information over a network.
Risk Assessment
An attacker could access sensitive data transmitted over the network, potentially leading to information leakage in network infrastructure.
Recommendation
Apply updates for Windows IKE Extension and implement network traffic monitoring for suspicious activity.
Other vulnerabilities in Windows IKE Extension
See all- CVE-2026-33824CriticalActively exploited
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
- CVE-2026-83795High
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
- CVE-2026-83685Medium
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.
- CVE-2026-83522High
Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-103569High
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
- CVE-2026-69881High
A null pointer dereference vulnerability in Windows IKE Extension allows an unauthorized attacker to cause a denial of service over a network.
- CVE-2026-69587High
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
- CVE-2026-69429High
Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network.
Original NVD description (English source)
Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS