CVE-2026-69881: CWE-476: NULL Pointer Dereference in Microsoft Windows 10 Version 1809

This vulnerability, identified as CWE-476 (NULL Pointer Dereference), exists in the Windows IKE Extension component of Microsoft Windows 10 Version 1809 and other specified builds. Exploitation can lead to a denial of service condition by causing the system to dereference a null pointer. The CVSS v3.1 base score is 7.5, indicating high severity, with network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability (denial of service). The vulnerability has been officially fixed by Microsoft, as indicated by the remediation level and vendor advisory.

An attacker can remotely cause a denial of service on affected Windows 10 systems by triggering a null pointer dereference in the IKE Extension, resulting in system instability or crash. There is no impact on confidentiality or integrity. No known exploits are reported in the wild at this time.

Microsoft has released official patches addressing this vulnerability. Users and administrators should apply the updates corresponding to their Windows 10 version as listed in the vendor advisory to remediate the issue. No additional mitigation actions are required beyond applying the official fix.