Windows 10 Version 1607 vulnerability

What happened

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

Affected versions

Windows 10 Version 1607: 10.0.14393.0 through before 10.0.14393.9060 (custom); 10.0.17763.0 through before 10.0.17763.8644 (custom); 10.0.19044.0 through before 10.0.19044.7184 (custom); 10.0.19045.0 through before 10.0.19045.7184 (custom); 10.0.22631.0 through before 10.0.22631.6936 (custom); 10.0.26100.0 through before 10.0.26100.8246 (custom); 10.0.26200.0 through before 10.0.26200.8246 (custom); 10.0.28000.0 through before 10.0.28000.1836 (custom); 10.0.20348.0 through before 10.0.20348.5020 (custom); 10.0.25398.0 through before 10.0.25398.2274 (custom); 10.0.26100.0 through before 10.0.26100.32690 (custom) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.