CVE-2026-33824 - Vulnerability Details

- Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

Description

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

Published: 2026-04-14

Score: 9.8 Critical

EPSS: 77.1% High

KEV: Yes

Impact:

Action:

Analysis

Impact

This vulnerability is a double free flaw in the Windows Internet Key Exchange (IKE) Service Extensions, identified as CWE‑415. A double free can corrupt memory and allow an attacker to execute arbitrary code on the target system. The impact is full compromise, granting malicious control over the affected machine’s data and operational capabilities.

Affected Systems

Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, and 26H1; and Windows Server 2016, 2019, 2022, 2025, and 23H2 editions (including Server Core installations) are affected by this flaw.

Risk and Exploitability

The CVSS score of 9.8 indicates a critical severity. The EPSS score of 77% indicates a high likelihood of exploitation, and the vulnerability is listed in CISA’s KEV catalogue. It is inferred that an attacker can trigger the double free by sending specially crafted IKE packets over the network, enabling remote code execution without authentication. The high severity and remote exploitation potential warrant immediate action to protect vulnerable systems.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Microsoft

Windows 10 Version 1607

affected

Version	Status	Constraints
`10.0.14393.0`	affected	< 10.0.14393.9060

Microsoft

Windows 10 Version 1809

affected

Version	Status	Constraints
`10.0.17763.0`	affected	< 10.0.17763.8644

Microsoft

Windows 10 Version 21H2

affected

Version	Status	Constraints
`10.0.19044.0`	affected	< 10.0.19044.7184

Microsoft

Windows 10 Version 22H2

affected

Version	Status	Constraints
`10.0.19045.0`	affected	< 10.0.19045.7184

Microsoft

Windows 11 version 23H2

affected

Version	Status	Constraints
`10.0.22631.0`	affected	< 10.0.22631.6936

Microsoft

Windows 11 Version 23H2

affected

Version	Status	Constraints
`10.0.22631.0`	affected	< 10.0.22631.6936

Microsoft

Windows 11 Version 24H2

affected

Version	Status	Constraints
`10.0.26100.0`	affected	< 10.0.26100.8246

Microsoft

Windows 11 Version 25H2

affected

Version	Status	Constraints
`10.0.26200.0`	affected	< 10.0.26200.8246

Microsoft

Windows 11 version 26H1

affected

Version	Status	Constraints
`10.0.28000.0`	affected	< 10.0.28000.1836

Microsoft

Windows Server 2016

affected

Version	Status	Constraints
`10.0.14393.0`	affected	< 10.0.14393.9060

Microsoft

Windows Server 2016 (Server Core installation)

affected

Version	Status	Constraints
`10.0.14393.0`	affected	< 10.0.14393.9060

Microsoft

Windows Server 2019

affected

Version	Status	Constraints
`10.0.17763.0`	affected	< 10.0.17763.8644

Microsoft

Windows Server 2019 (Server Core installation)

affected

Version	Status	Constraints
`10.0.17763.0`	affected	< 10.0.17763.8644

Microsoft

Windows Server 2022

affected

Version	Status	Constraints
`10.0.20348.0`	affected	< 10.0.20348.5020

Microsoft

Windows Server 2022, 23H2 Edition (Server Core installation)

affected

Version	Status	Constraints
`10.0.25398.0`	affected	< 10.0.25398.2274

Microsoft

Windows Server 2025

affected

Version	Status	Constraints
`10.0.26100.0`	affected	< 10.0.26100.32690

Microsoft

Windows Server 2025 (Server Core installation)

affected

Version	Status	Constraints
`10.0.26100.0`	affected	< 10.0.26100.32690

Configuration 1 [-]

OR	cpe:2.3:o:microsoft:windows_10_1607:::::::x64:*
	cpe:2.3:o:microsoft:windows_10_1607:::::::x86:*
	cpe:2.3:o:microsoft:windows_10_1809:::::::x64:*
	cpe:2.3:o:microsoft:windows_10_1809:::::::x86:*
	cpe:2.3:o:microsoft:windows_10_21h2:::::::arm64:*
	cpe:2.3:o:microsoft:windows_10_21h2:::::::x64:*
	cpe:2.3:o:microsoft:windows_10_21h2:::::::x86:*
	cpe:2.3:o:microsoft:windows_10_22h2:::::::arm64:*
	cpe:2.3:o:microsoft:windows_10_22h2:::::::x64:*
	cpe:2.3:o:microsoft:windows_10_22h2:::::::x86:*
	cpe:2.3:o:microsoft:windows_11_23h2:::::::arm64:*
	cpe:2.3:o:microsoft:windows_11_23h2:::::::x64:*
	cpe:2.3:o:microsoft:windows_11_24h2:::::::arm64:*
	cpe:2.3:o:microsoft:windows_11_24h2:::::::x64:*
	cpe:2.3:o:microsoft:windows_11_25h2:::::::arm64:*
	cpe:2.3:o:microsoft:windows_11_25h2:::::::x64:*
	cpe:2.3:o:microsoft:windows_11_26h1:::::::arm64:*
	cpe:2.3:o:microsoft:windows_11_26h1:::::::x64:*
	cpe:2.3:o:microsoft:windows_server_2016::::::::
	cpe:2.3:o:microsoft:windows_server_2019::::::::
	cpe:2.3:o:microsoft:windows_server_2022::::::::
	cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::
	cpe:2.3:o:microsoft:windows_server_2025::::::::

No data.

Vendor Product Confidence Versions

Microsoft

Windows 10 1607

86%

Version	Status	Scheme	Platform
`[10.0.14393.0,10.0.14393.9060)`	affected	generic	['32-bit_systems', 'x64-based_systems']

Microsoft

Windows 10 1809

86%

Version	Status	Scheme	Platform
`[10.0.17763.0,10.0.17763.8644)`	affected	generic	['32-bit_systems', 'x64-based_systems']

Microsoft

Windows 10 21h2

86%

Version	Status	Scheme	Platform
`[10.0.19044.0,10.0.19044.7184)`	affected	generic	['32-bit_systems', 'arm64-based_systems', 'x64-based_systems']

Microsoft

Windows 10 22h2

86%

Version	Status	Scheme	Platform
`[10.0.19045.0,10.0.19045.7184)`	affected	generic	['32-bit_systems', 'arm64-based_systems', 'x64-based_systems']

Microsoft

Windows 11 22h3

86%

Version	Status	Scheme	Platform
`[10.0.22631.0,10.0.22631.6936)`	affected	generic	['arm64-based_systems']

Microsoft

Windows 11 23h2

86%

Version	Status	Scheme	Platform
`[10.0.22631.0,10.0.22631.6936)`	affected	generic	['x64-based_systems']

Microsoft

Windows 11 24h2

86%

Version	Status	Scheme	Platform
`[10.0.26100.0,10.0.26100.32690)`	affected	generic	['arm64-based_systems', 'x64-based_systems']

Microsoft

Windows 11 25h2

86%

Version	Status	Scheme	Platform
`[10.0.26200.0,10.0.26200.8246)`	affected	generic	['arm64-based_systems', 'x64-based_systems']

Microsoft

Windows 11 26h1

86%

Version	Status	Scheme	Platform
`[10.0.28000.0,10.0.28000.1836)`	affected	generic	['arm64-based_systems', 'x64-based_systems']

Microsoft

Windows Server 2016

100%

Version	Status	Scheme	Platform
`[10.0.14393.0,10.0.14393.9060)`	affected	generic	['x64-based_systems']

Microsoft

Windows Server 2016 (server Core Installation)

100%

Version	Status	Scheme	Platform
`[10.0.14393.0,10.0.14393.9060)`	affected	generic	['x64-based_systems']

Microsoft

Windows Server 2019

100%

Version	Status	Scheme	Platform
`[10.0.17763.0,10.0.17763.8644)`	affected	generic	['x64-based_systems']

Microsoft

Windows Server 2019 (server Core Installation)

100%

Version	Status	Scheme	Platform
`[10.0.17763.0,10.0.17763.8644)`	affected	generic	['x64-based_systems']

Microsoft

Windows Server 2022

100%

Version	Status	Scheme	Platform
`[10.0.20348.0,10.0.20348.5020)`	affected	generic	['x64-based_systems']

Microsoft

Windows Server 2022, 23h2 Edition (server Core Installation)

100%

Version	Status	Scheme	Platform
`[10.0.25398.0,10.0.25398.2274)`	affected	generic	['x64-based_systems']

Microsoft

Windows Server 2025

100%

Version	Status	Scheme	Platform
`[10.0.26100.0,10.0.26100.32690)`	affected	generic	['x64-based_systems']

Microsoft

Windows Server 2025 (server Core Installation)

100%

Version	Status	Scheme	Platform
`[10.0.26100.0,10.0.26100.32690)`	affected	generic	['x64-based_systems']

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply the Microsoft security update addressing CVE‑2026‑33824.
Restrict inbound IKE traffic using firewall rules to limit exposure.
Disable or block the IKE service if it is not required for your environment.
Monitor network logs for suspicious IKE activity and verify no exploitation attempts.

Generated by OpenCVE AI on October 25, 2026 at 18:30 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is in the KEV database since Aug. 18, 2026.

The EPSS score is 0.77054.

Exploitation active

Automatable yes

Technical Impact total

References

Link	Providers
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33824
https://unit42.paloaltonetworks.com/autonomous-ai-cyber-attack-campaign/
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-33824

History

Tue, 18 Aug 2026 18:30:00 +0000

Type	Values Removed	Values Added
References		https://unit42.paloaltonetworks.com/autonomous-ai-cyber-attack-campaign/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-33824
Metrics	ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`	ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 18 Aug 2026 17:30:00 +0000

Type	Values Removed	Values Added
Metrics		kev `{'dateAdded': '2026-08-18T00:00:00+00:00', 'dueDate': '2026-08-21T00:00:00+00:00'}`

Fri, 17 Apr 2026 19:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Microsoft windows Server 2022 23h2
CPEs		cpe:2.3:o:microsoft:windows_10_1607:::::::x64:* cpe:2.3:o:microsoft:windows_10_1809:::::::x64:* cpe:2.3:o:microsoft:windows_10_21h2:::::::arm64:* cpe:2.3:o:microsoft:windows_10_21h2:::::::x64:* cpe:2.3:o:microsoft:windows_10_21h2:::::::x86:* cpe:2.3:o:microsoft:windows_10_22h2:::::::arm64:* cpe:2.3:o:microsoft:windows_10_22h2:::::::x64:* cpe:2.3:o:microsoft:windows_10_22h2:::::::x86:* cpe:2.3:o:microsoft:windows_11_23h2:::::::arm64:* cpe:2.3:o:microsoft:windows_11_23h2:::::::x64:* cpe:2.3:o:microsoft:windows_11_24h2:::::::arm64:* cpe:2.3:o:microsoft:windows_11_24h2:::::::x64:* cpe:2.3:o:microsoft:windows_11_25h2:::::::arm64:* cpe:2.3:o:microsoft:windows_11_25h2:::::::x64:* cpe:2.3:o:microsoft:windows_11_26h1:::::::arm64:* cpe:2.3:o:microsoft:windows_11_26h1:::::::x64:* cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::
Vendors & Products		Microsoft windows Server 2022 23h2

Wed, 15 Apr 2026 15:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Microsoft windows 10 21h2 Microsoft windows 10 22h2 Microsoft windows 11 22h3 Microsoft windows 11 23h2 Microsoft windows 11 24h2 Microsoft windows 11 25h2 Microsoft windows 11 26h1 Microsoft windows Server 2016 (server Core Installation) Microsoft windows Server 2019 (server Core Installation) Microsoft windows Server 2022, 23h2 Edition (server Core Installation) Microsoft windows Server 2025 (server Core Installation)
Vendors & Products		Microsoft windows 10 21h2 Microsoft windows 10 22h2 Microsoft windows 11 22h3 Microsoft windows 11 23h2 Microsoft windows 11 24h2 Microsoft windows 11 25h2 Microsoft windows 11 26h1 Microsoft windows Server 2016 (server Core Installation) Microsoft windows Server 2019 (server Core Installation) Microsoft windows Server 2022, 23h2 Edition (server Core Installation) Microsoft windows Server 2025 (server Core Installation)

Wed, 15 Apr 2026 10:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 14 Apr 2026 17:30:00 +0000

Type	Values Removed	Values Added
Description		Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
Title		Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
First Time appeared		Microsoft Microsoft windows 10 1607 Microsoft windows 10 1809 Microsoft windows 10 21h2 Microsoft windows 10 22h2 Microsoft windows 11 23h2 Microsoft windows 11 24h2 Microsoft windows 11 25h2 Microsoft windows 11 26h1 Microsoft windows Server 2016 Microsoft windows Server 2019 Microsoft windows Server 2022 Microsoft windows Server 2025 Microsoft windows Server 23h2
Weaknesses		CWE-415
CPEs		cpe:2.3:o:microsoft:windows_10_1607:::::::x86:* cpe:2.3:o:microsoft:windows_10_1809:::::::x86:* cpe:2.3:o:microsoft:windows_10_21H2:::::::x86:* cpe:2.3:o:microsoft:windows_10_22H2:::::::x64:* cpe:2.3:o:microsoft:windows_11_23H2:::::::arm64:* cpe:2.3:o:microsoft:windows_11_23H2:::::::x64:* cpe:2.3:o:microsoft:windows_11_24H2:::::::arm64:* cpe:2.3:o:microsoft:windows_11_25H2:::::::arm64:* cpe:2.3:o:microsoft:windows_11_26H1:::::::x64:* cpe:2.3:o:microsoft:windows_server_2016:::::::: cpe:2.3:o:microsoft:windows_server_2019:::::::: cpe:2.3:o:microsoft:windows_server_2022:::::::: cpe:2.3:o:microsoft:windows_server_2025:::::::: cpe:2.3:o:microsoft:windows_server_23h2::::::::
Vendors & Products		Microsoft Microsoft windows 10 1607 Microsoft windows 10 1809 Microsoft windows 10 21h2 Microsoft windows 10 22h2 Microsoft windows 11 23h2 Microsoft windows 11 24h2 Microsoft windows 11 25h2 Microsoft windows 11 26h1 Microsoft windows Server 2016 Microsoft windows Server 2019 Microsoft windows Server 2022 Microsoft windows Server 2025 Microsoft windows Server 23h2
References		https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33824
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}`

Subscriptions

Microsoft Windows 10 1607 Windows 10 1809 Windows 10 21h2 Windows 10 21h2 Windows 10 22h2 Windows 10 22h2 Windows 11 22h3 Windows 11 23h2 Windows 11 23h2 Windows 11 24h2 Windows 11 24h2 Windows 11 25h2 Windows 11 25h2 Windows 11 26h1 Windows 11 26h1 Windows Server 2016 Windows Server 2016 (server Core Installation) Windows Server 2019 Windows Server 2019 (server Core Installation) Windows Server 2022 Windows Server 2022, 23h2 Edition (server Core Installation) Windows Server 2022 23h2 Windows Server 2025 Windows Server 2025 (server Core Installation) Windows Server 23h2

MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2026-04-14T16:58:45.469Z

Updated: 2026-10-15T15:53:44.194Z

Reserved: 2026-03-24T00:52:01.352Z

Link: CVE-2026-33824

Vulnrichment

Updated: 2026-04-15T09:07:43.779Z

NVD

Status : Analyzed

Published: 2026-04-14T18:17:34.767

Modified: 2026-09-25T18:17:25.133

Link: CVE-2026-33824

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-10-25T18:45:07Z

Weaknesses

CWE-415
Double Free

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation active

Automatable yes

Technical Impact total

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object