CVE-2026-50696 is a heap-based buffer overflow vulnerability in the Windows Internet Key Exchange (IKE) Protocol affecting Windows 10 Version 1809 (build 10.0.17763.0). An attacker without privileges or user interaction can exploit this vulnerability remotely over a network to cause a denial of service condition. The vulnerability has a CVSS v3.1 base score of 7.5, reflecting its high severity and ease of exploitation. Microsoft has released an official fix to address this issue.

Successful exploitation of this vulnerability results in denial of service (DoS) on affected systems by causing a heap-based buffer overflow in the IKE Protocol. There is no impact on confidentiality or integrity, but availability is severely affected. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50696 to remediate this vulnerability.