Windows Internet Key Exchange Service Extensions

Critical Vulnerability in Windows IKE Component Actively Exploited in Attacks

CISA warned of the exploitation of a remote code execution vulnerability in Internet Key Exchange Service Extensions on supported Windows systems. The vulnerability allows an unauthenticated attacker to execute code using specially crafted packets, prompting the agency to require U.S. federal agencies to secure their devices within three days.