CISA Warns Microsoft Internet Key Exchange RCE Flaw Is Actively Exploited

Gbhackers •Divya • August 19, 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Microsoft Internet Key Exchange (IKE) Service Extensions to its Known Exploited Vulnerabilities (KEV) Catalog. This vulnerability, tracked as CVE-2026-33824, is currently being actively exploited. The issue is classified as a double-free vulnerability, which means it affects the memory management of Microsoft […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in Windows IKE Actively Exploited A critical remote code execution vulnerability in Microsoft Windows Internet Key Exchange (IKE), tracked as CVE-2026-33824, is being actively exploited. This double-free memory corruption issue affects all supported versions of Windows 10, Windows 11, and Windows Server. Attackers can exploit the vulnerability remotely without authentication by sending specially crafted IKEv2 packets through UDP ports 500 or 4500. The exploitation allows unauthorized code execution with SYSTEM privileges, posing significant risks to affected systems. CISA has added this vulnerability to its Known Exploited Vulnerabilities Catalog, urging immediate action from federal agencies and all network defenders. Microsoft had previously patched the vulnerability on April 14, 2026, but the assessment of its exploitability has changed. Security teams are advised to block inbound traffic on the affected ports if immediate patching is not possible. The situation is critical, with ongoing attacks reported. 4 sources 81

Extracted Entities

CVEs (1)

CVE-2026-33824

CWE Weaknesses (1)

CWE-415 - Double Free