Critical RCE flaw in Windows IKE Extension now actively exploited
Found by web discovery while looking for coverage of CVE-2026-33824
CISA warns CVE-2026-33824, a critical unprivileged RCE in Windows IKE Extension, is now actively exploited.
CVE-2026-33824 is a critical remote code execution vulnerability in the Windows IKE Extension affecting all supported Windows 10, Windows 11, and Windows Server releases. The flaw allows unprivileged attackers to gain code execution on affected systems. CISA has flagged the vulnerability as actively exploited in attacks, indicating a KEV addition and urgent patching priority for Windows environments.
- CVE-2026-33824 is actively exploited per CISA
- Critical RCE in Windows IKE Extension
- Affects all supported Windows 10/11 and Windows Server
- No privileges required for code execution
- CVEs
- CVE-2026-33824
- Organizations
- BleepingComputer
- Countries
- United States
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-33824 | Unauthenticated Double-Free RCE in Microsoft Windows IKE Extension | 9.8 | 77% | KEV | KEV |
From the original article
Tracked as CVE-2026-33824, this RCE vulnerability impacts all supported Windows 10, Windows 11, and Windows Server releases, and it allows attackers without privileges to gain code execution by ...
bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.