Vulnerability intelligence
CVE-2026-33824
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
CVSS Score
9.8
Critical
EPSS — Exploit Probability
56%
Riskier than 99% of all CVEs
Exploitation
Not in CISA KEV
No federal exploitation record
Remediation
Patch available
Vendor fix published
6 articles across 5 outlets · first covered Apr 14, 2026 · latest May 13, 2026
Coverage timeline
-
Microsoft’s AI Tool MDASH Finds Two Critical Windows Zero Daysthehackernews.com · May 13, 2026
-
Microsoft patches IKEv2 flaw allowing SYSTEM code executionwww.thezdi.com · Apr 23, 2026
-
Microsoft Fixes Two Zero-Days in April Patch Tuesdaywww.infosecurity-magazine.com · Apr 15, 2026
-
Microsoft fixes SharePoint zero day CVE-2026-32201 in Aprilsecurityaffairs.com · Apr 15, 2026
-
Microsoft patches 167 flaws, including exploited SharePoint bugwww.rapid7.com · Apr 14, 2026
-
Adobe and Microsoft Patch Tuesday sees record fixes amid exploitswww.thezdi.com · Apr 14, 2026