CVE-2026-33824
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
- Affected products
- Windows, Windows 10
- Microsoft Windows 10 1607
- < 10.0.14393.9060
- Microsoft Windows 10 1809
- < 10.0.17763.8644
- Microsoft Windows 10 21h2
- < 10.0.19044.7184
- Microsoft Windows 10 22h2
- < 10.0.19045.7184
- Microsoft Windows 11 23h2
- < 10.0.22631.6936
- Microsoft Windows 11 24h2
- < 10.0.26100.8246
- CVSS 3.1
- 9.8 CRITICAL
- EPSS
- 77.9% (100th percentile)
- Weakness
- CWE-415
- NVD status
- Analyzed
- Published
- 2026-04-14
CVE-2026-33824 at NVD
3 known exploits for CVE-2026-33824
Proof-of-concept code and exploit modules indexed by Sploitus