Cyber threats / Vulnerabilities

CVE-2026-33824

Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
77.4%
EPSS
100%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution.

Vendor
Microsoft
Product
Internet Key Exchange (IKE) Service Extensions
Added to KEV
Aug 18, 2026
Remediation due
Aug 21, 2026 (US federal deadline)
Ransomware use
Not known
Weakness
CWE-415
EPSS
77.4% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded
References