VulnIntel

CVE-2026-33824

CVSS 9.8 · CRITICAL
Exploited in the wild
Remediation overdue by 35 days
EPSS p99
Higher than 99% of all CVEs — imminent exploitation likely.
Patch available
Vendor advisory or patch linked

Published 4/14/2026 · updated 8/19/2026 · CWE-415

Share
Get asset-aware triage

Summary

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

CVSS 9.8 — CRITICAL

9.8 / 10
  • AV: Network
  • AC: Low complexity
  • PR: No privileges
  • UI: No user interaction
  • S: Scope unchanged
  • C: Confidentiality: High
  • I: Integrity: High
  • A: Availability: High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS exploitation probability

55.9%

Percentile p99 — Higher than 99% of all CVEs — imminent exploitation likely.

Affected products

13 vendor/product entries
  • Microsoft Windows 10 1607< 10.0.14393.9060
  • Microsoft Windows 10 1809< 10.0.17763.8644
  • Microsoft Windows 10 21h2< 10.0.19044.7184
  • Microsoft Windows 10 22h2< 10.0.19045.7184
  • Microsoft Windows 11 23h2< 10.0.22631.6936
  • Microsoft Windows 11 24h2< 10.0.26100.8246
Do you run any of these? Sign in to match this CVE against your SBOM and asset inventory automatically.

Timeline

  1. Apr 14, 2026 · Disclosed / published in NVD
  2. Aug 18, 2026 · Added to CISA KEV catalog
  3. Aug 19, 2026 · Intel last updated
  4. Aug 21, 2026 · CISA remediation deadline

Intel sources

Which upstream feeds returned data for this CVE, and when they were last fetched.

  • NVD· 36 days ago
  • CVE.org· 36 days ago
  • FIRST EPSS· 36 days ago
  • CISA KEV· 12 days ago
  • OSV· 36 days ago

Listed in CISA KEV

Added 2026-08-18 · Remediation overdue by 35 days.

References

Vendor & CERT advisories2
Other1

Unlock the full report

See how CVE-2026-33824 hits your stack.

Free public data ends here. Sign in to correlate this CVE against your SBOM and assets, get an AI-grounded exploit chain, generate a ModSecurity virtual patch, and share findings with your team.

  • · Asset-aware CVSS & priority
  • · Grounded AI analysis (A–D graded)
  • · Auto-generated WAF / IPS rules
  • · Jira, SIEM, Slack, Teams delivery

No credit card · 100 free enrichments · analyst-grade citations.