CVE-2026-23666
As of 2026-05-07, CVE-2026-23666 is a CVSS 9.8 (CRITICAL-severity) vulnerability. EPSS exploitation probability 0.2%. Threadlinqs Intelligence tracks 2 threats exploiting it.
Last updated: 2026-05-07
Windows TCP/IP IPv6 remote code execution vulnerability caused by an integer overflow in IPv6 fragment reassembly. Reachable from any adjacent network and rated wormable by Microsoft MSRC, allowing unauthenticated attackers to achieve code execution via crafted IPv6 packets.
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
Weaknesses (CWE)
CWE-190
Threats tracking this CVE
- Microsoft April 2026 Patch Tuesday — 163 CVEs / 88 Advisories (CVE-2026-32201 SharePoint Zero-Day Exploited In-The-Wild, CVE-2026-33825 Defender EoP Public PoC, CVE-2026-33824 IKE RCE CVSS 9.8, CVE-2026-33827 TCP/IP Wormable RCE) — CRITICAL
- Microsoft April 2026 Patch Tuesday — 167 Flaws, 2 Zero-Days (SharePoint Spoofing CVE-2026-32201 + Defender EoP CVE-2026-33825) — CRITICAL
References
← all vulnerabilities · Markdown version · Threadlinqs Intelligence
Enriched from CVE.org, NVD (this product uses the NVD API but is not endorsed or certified by the NVD), FIRST EPSS, CISA KEV, and GitHub Security Advisories.