CVE record · 5 sources
CVE-2026-33824
KEVCVSS 7.0Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
- Vendor
- Microsoft
- Product
- Internet Key Exchange (IKE) Service Extensions
- CVSS
- 7.0
- EPSS
- 0.039 (p90)
- CISA KEV
- listed
- Exposure class
- Browser, Collaboration, Operating system, Hypervisor
Coverage
5Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution.
-
September 2026 Patch Tuesday
What's happened since August Patch Tuesday It's been an active month between cycles. Since Microsoft's August 11 release, five Microsoft CVEs have been confirmed exploited in the wild, and Google shipped an emergency Chrome fix…
-
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free…
-
CVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
Added clarifying information to the mitigation. This is an informational change only.
-
August 2026 CVE Landscape
In August 2026, Insikt Group® identified 73 high-impact vulnerabilities that should be prioritized for remediation, 43 of which had a Very Critical Recorded Future Risk Score. This represents a 14% decrease from last month.