Question 1

What is CVE-2026-33824 — Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability?

Accepted Answer

Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution.

Question 2

What is the authoritative source for CVE-2026-33824?

Accepted Answer

Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability (CVE-2026-33824) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

Question 3

How severe is CVE-2026-33824?

Accepted Answer

CVE-2026-33824 carries a CRITICAL CVSS 9.8 severity rating. It appears on the CISA Known Exploited Vulnerabilities (KEV) catalog, indicating confirmed in-the-wild exploitation.

CVSS 3.1	9.8 (CRITICAL)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	1.62% probability of exploitation · percentile 75.2% · 2026-10-05T12:00:23Z
Published	2026-04-14
Last modified	2026-09-25

CVE-2026-33824Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

Description

Scoring

CISA KEV entry

Underlying weaknesses· 1

References

1

Related by meaning· 6