Page generated: 08 Nov 2026, 13:03 UTC
← Dashboard

CVE-2026-33824

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

CVSS 9.8 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
0.0/10
REALITY · THREAT PRIORITY
8.9/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 9.8: +1.47
  • Fresh EPSS: 77.05%: +0.39

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 26 documents and public datasets.

Hype components

Headline sample (25%)
0/100
Press, 30 days (60%)
0/100
Grounded branding (15%)
0/100
HYPE TOTAL0/100

Sources and documents

Recorded Future
Press · 08 Sep 2026, 07:00 · August 2026 CVE Landscape - Recorded Future
SOCRadar
Press · 20 Aug 2026, 07:00 · Windows IKE CVE-2026-33824 Added to CISA KEV - SOCRadar
Security Affairs
Press · 19 Aug 2026, 07:00 · U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its ... - Security Affairs
The Hacker News
Press · 19 Aug 2026, 07:00 · Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation - The Hacker News
BleepingComputer
Press · 19 Aug 2026, 07:00 · Critical RCE flaw in Windows IKE Extension now actively exploited - BleepingComputer
See all 26 source documents
CyberSecurityNews
Press · 19 Aug 2026, 07:00 · CISA Adds Microsoft Internet Key Exchange RCE Vulnerability Exploited in Attacks - CyberSecurityNews
SecurityWeek
Press · 19 Aug 2026, 07:00 · CISA Urges Immediate Patching of Exploited Microsoft, VMware, Apple Vulnerabilities - SecurityWeek
Cyber Press
Press · 19 Aug 2026, 07:00 · CISA Warns of Windows IKE Flaw Allowing Unauthenticated Remote Code Execution - Cyber Press
heise online
Press · 19 Aug 2026, 07:00 · Warning about attacks on Microsoft IKE, SharePoint, VMware vCenter and macOS - heise online
The Hacker News
Press · 05 Aug 2026, 07:00 · CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited - The Hacker News
Unit 42
Press · 30 Jul 2026, 07:00 · Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks - Unit 42
SiliconANGLE
Press · 13 May 2026, 07:00 · Microsoft’s new agentic security system MDASH uncovers four critical Windows RCE flaws - SiliconANGLE
Microsoft
Press · 12 May 2026, 07:00 · Defense at AI speed: Microsoft’s new multi-model agentic security system tops leading industry benchmark - Microsoft
Qualys
Press · 27 Apr 2026, 07:00 · Microsoft and Adobe Patch Tuesday, April 2026 Security Update Review - Qualys
thezdi.com
Press · 23 Apr 2026, 07:00 · CVE-2026-33824: Remote Code Execution in Windows IKEv2 - thezdi.com
CCB Belgium
Press · 15 Apr 2026, 07:00 · Warning: Microsoft Patch Tuesday April 2026 patches 163 vulnerabilities (8 Critical, 154 Important, 1 Moderate), patch Immediately!! - CCB Belgium
The Hacker News
Press · 15 Apr 2026, 07:00 · Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities - The Hacker News
Security Affairs
Press · 15 Apr 2026, 07:00 · Microsoft Patch Tuesday for April 2026 fixed actively exploited SharePoint zero-day - Security Affairs
Hong Kong Computer Emergency Response Team Coordination Centre
Press · 15 Apr 2026, 07:00 · Microsoft Monthly Security Update (April 2026) - Hong Kong Computer Emergency Response Team Coordination Centre
Arctic Wolf
Press · 14 Apr 2026, 07:00 · Microsoft Patch Tuesday: April 2026 - Arctic Wolf
Cisco Talos Blog
Press · 14 Apr 2026, 07:00 · Microsoft Patch Tuesday for April 2026 - Snort Rule and Prominent Vulnerabilities - Cisco Talos Blog
Rapid7
Press · 14 Apr 2026, 07:00 · Patch Tuesday - April 2026 - Rapid7
LinkedIn
Press · 14 Apr 2026, 07:00 · Microsoft April 2026 Patch Tuesday Fixes 160+ Vulnerabilities, Including 2 Zero-Day Flaws - LinkedIn
Dark Reading
Press · 14 Apr 2026, 07:00 · Privilege Elevation Dominates Massive Microsoft Patch Update - Dark Reading
BleepingComputer
Press · 14 Apr 2026, 07:00 · Microsoft April 2026 Patch Tuesday fixes 167 flaws, 2 zero-days - BleepingComputer
thezdi.com
Press · 14 Apr 2026, 07:00 · The April 2026 Security Update Review - thezdi.com

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.9 (2026-11-02 15:14). The curve appears once the score changes.

Public exploit evidence

1

Public exploit entries / repo candidates

See 1 repos with metrics
RepositoryStarsForksLanguageUpdated
EpSiLoNPoInTOrI/IKEV2-POC74C++27 Jun 2026, 19:43
Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 9.8; EPSS 77.1%
Attention, last 30 days
0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential
network access, no prior privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 14:00:06.817747+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
First press mention
14 Apr 2026, 07:00
Published
14 Apr 2026, 16:58
Added to the CISA KEV catalog
18 Aug 2026, 00:00
Latest press mention
08 Sep 2026, 07:00
Score calculated
05 Nov 2026, 14:00
PoCs on GitHub
1 repositories