CVE-2022-21849

CVE-2022-21849 is a critical Remote Code Execution vulnerability affecting the Windows Internet Key Exchange (IKE) Protocol Extensions across various Windows versions, including Windows 10, 11, and Server editions. With a CVSS score of 9.8, it presents a severe risk, allowing unauthenticated attackers to achieve full compromise (confidentiality, integrity, availability) with low attack complexity over the network. Despite its high severity and some community discussion, there is currently no evidence of active exploitation in the wild, nor are there publicly available exploit modules in common frameworks like Metasploit or ExploitDB, though a proof-of-concept trigger has been discussed.