CVE-2026-83795
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk66th percentile - higher than 66% of all known CVEs
Summary
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
Risk Assessment
An attacker could cause a service crash, leading to system unavailability for users.
Recommendation
Install security updates and restrict access to the IKE protocol from trusted sources.
Other vulnerabilities in Windows IKE Extension
See all- CVE-2026-33824CriticalActively exploited
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
- CVE-2026-83685Medium
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.
- CVE-2026-83522High
Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-83521Medium
An out-of-bounds read vulnerability exists in Windows IKE Extension. An authorized attacker can exploit this to disclose information over a network.
- CVE-2026-103569High
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
- CVE-2026-69881High
A null pointer dereference vulnerability in Windows IKE Extension allows an unauthorized attacker to cause a denial of service over a network.
- CVE-2026-69587High
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
- CVE-2026-69429High
Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network.
Original NVD description (English source)
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS