CVE-2026-83795
7.5HighPublished 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-122, CWE-125
Impact
Remote unauthenticated attackers can crash the system or IPsec service over the network, causing a denial of service. They only need network access to reach the host's IKE ports.
Root cause
A heap-based buffer overflow and out-of-bounds read flaw exists in the Windows IKE Extension parser.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Install the Microsoft security update for your Windows version referenced in the advisory. If patching must wait, block inbound UDP ports 500 and 4500 at the network perimeter or firewall if IPsec is not strictly required.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.