CVE-2026-33824

A double free vulnerability in Microsoft's Internet Key Exchange (IKE) Service Extensions allows remote code execution and is actively exploited in the wild.

This double free flaw in Microsoft's IKE Service Extensions enables remote code execution, meaning attackers can execute arbitrary commands on affected systems without prior access. For DIB organizations, this represents a critical exposure where unpatched systems could be compromised remotely, leading to data breaches or system takeover. Organizations must ensure this CVE is patched immediately and monitor for exploitation attempts.

Shame score — A double free vulnerability enabling remote code execution that is actively exploited in the wild demonstrates severe negligence in patch management and vulnerability handling.