CVE-2012-5362: The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of ser...

Security readout for executives and security teams

This CVE describes a denial-of-service weakness in the IPv6 handling of Microsoft Windows 7 and earlier. A remote attacker could disrupt availability by overwhelming affected systems with ICMPv6 Neighbor Solicitation traffic. The public bundle does not provide a CVSS score, patch status, or evidence of active exploitation. Exposure is most plausible where Windows 7 or earlier systems have IPv6 enabled and are reachable from untrusted or poorly filtered networks. The source bundle lists affected products as n/a, so exact platform scope is incomplete despite the CVE description naming Windows 7 and earlier. Handle as a legacy availability risk with incomplete public detail. Prioritize discovery and exposure reduction for any critical Windows 7 or earlier systems, especially where downtime has business impact. Urgency should increase if affected hosts are internet-facing or operationally sensitive. Mitigation focus: Check Microsoft or vendor guidance for official fixes or advisories.; Inventory Windows 7 and earlier systems in operational environments.; Reduce untrusted IPv6 exposure where business operations allow..

Prepared

Jun 6, 2026, 02:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.