CVE-2022-21890

CVE-2022-21890 is a denial-of-service vulnerability affecting the Windows Internet Key Exchange (IKE) Extension across numerous Windows versions, including Windows 10, 11, and various Server editions. This high-severity flaw (CVSS 7.5) can be exploited remotely without authentication, potentially leading to a complete service disruption. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered some community discussion and media coverage, notably for its impact on L2TP VPN connections.