cve-2026-50696

The cve-2026-50696 tag covers Microsoft’s confirmed heap-based buffer overflow vulnerability in the Internet Key Exchange (IKE) protocol. The flaw affects supported Windows clients and servers, particularly systems that terminate IPsec or VPN connections, and can enable an unauthorized attacker to cause a network-based denial-of-service condition through malicious traffic. Microsoft rates the issue Important and assigns it a CVSS 3.1 score of 7.5. No account, local access, or user interaction is required for exploitation. Tagged coverage focuses on the July cumulative Windows updates, including KB5101650, and the need to prioritize patching systems exposed to IKE, IPsec, or VPN-related traffic.