RaqibCTI
+ Request intel workspace
CVE

CVE-2026-33824

P2
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
Microsoft · Internet Key Exchange (IKE) Service Extensions
Date added (CISA)
2026-08-18
Remediation due
2026-08-21
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Associated with
Related to
  • Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaignCorrelated cluster2026-09-16
  • DysphoriacampaignCorrelated cluster2026-08-24

Description

Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution.

Source: NVD ↗ · CISA KEV Catalog ↗