CVE-2022-34721

CVE-2022-34721 is a critical Remote Code Execution vulnerability affecting the Windows Internet Key Exchange (IKE) Protocol Extensions across numerous Windows versions, including Windows 10, 11, and various Server editions. With a CVSS score of 9.8, it allows unauthenticated attackers to execute arbitrary code remotely over the network with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While not currently listed in CISA's KEV catalog, its high EPSS score and significant media coverage indicate a high potential for future exploitation. Although no public exploit code is available in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered substantial community discussion and media attention, including reports of it being a "wormable flaw" and a "zero-day" in some articles.