CVE-2026-83522
HighCVSS 8.1Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.
Risk Assessment
An attacker can impersonate trusted sources, potentially compromising communication integrity.
Recommendation
Update Windows and configure IKE according to vendor recommendations.
Other vulnerabilities in Windows IKE Extension
See all- CVE-2026-33824CriticalActively exploited
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
- CVE-2026-83795High
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
- CVE-2026-83685Medium
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.
- CVE-2026-83521Medium
An out-of-bounds read vulnerability exists in Windows IKE Extension. An authorized attacker can exploit this to disclose information over a network.
- CVE-2026-103569High
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
- CVE-2026-69881High
A null pointer dereference vulnerability in Windows IKE Extension allows an unauthorized attacker to cause a denial of service over a network.
- CVE-2026-69587High
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
- CVE-2026-69429High
Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network.
Original NVD description (English source)
Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS