Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2976 articles · 110847 vulns · 36/41 feeds (7d)
← Back to list
9.8
CVE-2026-33824EXPLOITEDPATCHED
Microsoft · Windows 10 Version 1607

Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

Description

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

Affected Products

VendorProductVersions
MicrosoftWindows 10 Version 160710.0.14393.0, 10.0.17763.0, 10.0.19044.0, 10.0.19045.0, 10.0.22631.0, 10.0.22631.0, 10.0.26100.0, 10.0.26200.0, 10.0.28000.0, 10.0.14393.0, 10.0.14393.0, 10.0.17763.0, 10.0.17763.0, 10.0.20348.0, 10.0.25398.0, 10.0.26100.0, 10.0.26100.0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
microsoftwindows 11 version 22h3mitre_affected90%
microsoftwindows server 2022, 23h2 edition (server core installation)mitre_affected90%
microsoftwindowsmitre_affected90%
microsoftwindows 10 version 22h2mitre_affected90%
microsoftwindows 11 version 23h2mitre_affected90%

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33824(vendor-advisory, patch)

Related News (4 articles)

Tier C
Rapid7 Blog1h ago
Patch Tuesday - April 2026
→ No new info (linked only)
Tier C
Cisco Talos2h ago
Microsoft Patch Tuesday for April 2026 - Snort Rule and Prominent Vulnerabilities
→ No new info (linked only)
Tier C
VulDB4h ago
CVE-2026-33824 | Microsoft Windows up to Server 2025 double free
→ No new info (linked only)
Tier A
Microsoft MSRC9h ago
CVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
→ No new info (linked only)
CVSS 3.19.8 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
10.0.14393.906010.0.17763.864410.0.19044.718410.0.19045.718410.0.22631.693610.0.26100.3269010.0.26200.824610.0.28000.183610.0.20348.502010.0.25398.2274
CWECWE-415
PublishedApr 14, 2026
Last enriched5h agov2
Trending Score68
Source articles4
Independent4
Info Completeness9/14
Missing: title, epss, kev, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-32201EXPKEV
Microsoft SharePoint Server Spoofing Vulnerability
Trending: 150
HIGHCVE-2026-26171EXP
.NET Denial of Service Vulnerability
Trending: 70
HIGHCVE-2026-32071EXP
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Trending: 67
HIGHCVE-2026-32075EXP
Windows UPnP Device Host Elevation of Privilege Vulnerability
Trending: 66
HIGHCVE-2026-32093EXP
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
Trending: 66

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 14, 2026
Discovered by ZDM
Apr 14, 2026
Updated: description, exploitAvailable, activelyExploited
Apr 14, 2026
Actively Exploited
Apr 14, 2026
Exploit Available
Apr 14, 2026
Patch Available
Apr 14, 2026

Version History

v2
Last enriched 5h ago
v2Tier A5h ago

Added a detailed description of the vulnerability and marked it as actively exploited with an exploit available.

descriptionexploitAvailableactivelyExploited
via Microsoft MSRC
v15h ago

Initial creation