CVE-2026-33824CISA KEV
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
CISA lists this Microsoft vulnerability as known exploited. Its MSRC release detail is outside this installation's collected history.
CISA catalog record
Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution.
- Product
- Internet Key Exchange (IKE) Service Extensions
- Added to KEV
- 18 Aug 2026
- Federal remediation due
- 21 Aug 2026
- Known ransomware use
- Not reported