cybersecuritywindowsrceikev2buffer overflow
Critical RCE flaw in Windows IKE Extension now actively exploited
August 18, 2026
Back to all postsA critical Remote Code Execution (RCE) vulnerability has been identified in the Windows Implementation of Internet Key Exchange version 2 (IKEv2) extension for . This vulnerability, tracked as CVE-2023-23397, allows attackers to execute arbitrary code on affected systems. The flaw is currently being actively exploited in targeted attacks, posing a significant threat to Canadian businesses that use Windows servers for their network infrastructure. The vulnerability is due to an improper handling of malformed XML input data, leading to a heap-based buffer overflow. To mitigate the risk, Microsoft has released a security update, and it's highly recommended that businesses apply the update as soon as possible.
Source: BleepingComputer
cybersecuritywindowsrceikev2buffer overflow
Concerned about this threat to your business?
We help Canadian SMBs deploy the controls discussed in this article. Free 30-minute assessment — no obligation.