CVE-2026-69587: CWE-476: NULL Pointer Dereference in Microsoft Windows 11 version 23H2

This vulnerability (CVE-2026-69587) is a null pointer dereference in the Windows IKE Extension component of Microsoft Windows 11 version 23H2. It allows an unauthenticated attacker to trigger a denial of service condition remotely over a network. The flaw affects several Windows 11 builds starting from 10.0.20348.0 up to but excluding fixed builds such as 10.0.22631.7582 and others. Microsoft has published an official fix for this issue, as detailed in their security update guide.

The vulnerability enables an unauthenticated attacker to cause a denial of service (DoS) on affected Windows 11 systems by exploiting a null pointer dereference in the IKE Extension. There is no impact on confidentiality or integrity, but availability is severely affected.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for Windows 11 version 23H2 to remediate this vulnerability. Refer to the Microsoft security update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69587 for detailed patch information and deployment instructions.