PT-2026-32883 · Microsoft · Windows 10+1

Published 2026-04-14 · Updated 2026-05-16 · CVE-2026-33824

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 Version 1607 versions 10.0.14393.0 through 10.0.14393.9059

Description A double free issue exists in the Windows IKE Extension. This flaw allows an unauthorized remote attacker to trigger memory corruption in the IKE service extensions, potentially leading to arbitrary code execution over the network with SYSTEM privileges. The issue affects IKEv2 and requires no authentication or user interaction.

Recommendations Update Microsoft Windows 10 Version 1607 to version 10.0.14393.9060 or later.

Fix

RCE

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

BDU:2026-05343

CVE-2026-33824

Affected Products

Windows

Windows 10

References · 44

• https://nvd.nist.gov/vuln/detail/CVE-2026-33824 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33824 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33824 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05343 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-33824 · Vendor Advisory
• https://reddit.com/r/AZURE/comments/1t3zp7a/cve202633824_bluehammer_zeroauth_ikev2_doublefree · Reddit Post
• https://reddit.com/r/sysadmin/comments/1t4x4gk/cve202632201_sharepoint_zeroday_1300_servers · Reddit Post
• https://reddit.com/r/exchangeserver/comments/1t4ha3u/disabling_ikeext_service_on_exchange_servers · Reddit Post
• https://twitter.com/OrizonCyber/status/2044121048413585475 · Twitter Post
• https://twitter.com/DVC_analytics/status/2054804809039888599 · Twitter Post
• https://twitter.com/CisoRaging77913/status/2046077389327712658 · Twitter Post
• https://twitter.com/RedHornet_Intel/status/2044119283471352153 · Twitter Post
• https://twitter.com/mnh_18/status/2047322099245805658 · Twitter Post
• https://twitter.com/FosoTweets/status/2048715928326525161 · Twitter Post
• https://twitter.com/thezdi/status/2044167978938237299 · Twitter Post