Exploit for CVE-2026-33824

cve · 2026-04-14

Description

CVE-2026-33824 describes a remote code execution vulnerability in Windows IKE service extensions.

Affected software

Microsoft Windows 10 1607< 10.0.14393.9060

Microsoft Windows 10 1809< 10.0.17763.8644

Microsoft Windows 10 21h2< 10.0.19044.7184

Microsoft Windows 10 22h2< 10.0.19045.7184

CVSS 9.8 for CVE-2026-33824

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

77.9%higher than 99.5% of all CVEs

Updated 2026-08-20

CVE Information

CVE-2026-33824

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33824

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-33824

https://unit42.paloaltonetworks.com/autonomous-ai-cyber-attack-campaign/

Exploit Details

Modified:2026-08-19 04:16

Last Seen:2026-08-19 05:29

Reporter:microsoft

Other exploits for CVE-2026-33824

Exploit for Double Free in Microsoft

2026-05-18 EpSiLoNPoInTOrIGITHUB

Exploit for CVE-2026-33824

2026-04-16 z3r0h3roGITHUB

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=CVE-2026-33824
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

Exploit Code

Share

Share on social media: