CVE-2026-35424
High
Published: 12 May 2026
Published
12 May 2026
Modified
12 May 2026
KEV Added
—
Patch
—
CVSS Score
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
N/A
Risk Priority
15
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2026-35424 is a high-severity Missing Release of Memory after Effective Lifetime (CWE-401) vulnerability. Its CVSS base score is 7.5 (High).
Operationally, it is not currently listed in the CISA KEV catalog.
NVD Description
Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.
Deeper analysisAI
Automated synthesis unavailable for this CVE.
Details
- CWE(s)