CVE-2026-35424CWE-401

Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

High · published May 12, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
67.3
In the wild
Unconfirmed
What it is

Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.01174 · 67.3th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2026-05-12T16:58Z
EPSS history
Timeline
  • 12 MAY 16:58Z
    Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
    cvelistv5