PT-2026-32886 · Microsoft · Windows+15

Published 2026-04-14 · Updated 2026-04-15 · CVE-2026-33827

X.com · Redhornet Intel

CVSS v3.1

8.1

High

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2026-33827 | Microsoft Windows 10 Version 1607 | Remote Code Execution

Description Race condition in Windows TCP/IP stack allows unauth remote attackers to trigger concurrent execution with improper synchronization, enabling RCE over the network.

Severity: High Exploitation: Unknown Public PoC: Unknown Patch Available: Yes Affected Product: Microsoft Windows 10 Version 1607 Affected Version: >= 10.0.14393.0 and < 10.0.14393.9060

Sources Vendor: https://t.co/PlKgcLAj7D

Fix

RCE

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2026-33827

Affected Products

Windows

Windows 10 Version 1607

Windows 10 Version 1809

Windows 10 Version 21H2

Windows 10 Version 22H2

Windows 11 Version 23H2

Windows 11 Version 24H2

Windows 11 Version 25H2

Windows 11 Version 22H3

Windows 11 Version 26H1

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

Windows Server 2019

Windows Server 2022

Windows Server 2025

References · 10

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-33827 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33827 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33827 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33827 · Vendor Advisory
• https://twitter.com/hmier/status/2044415231988781494 · Twitter Post
• https://twitter.com/RedHornet_Intel/status/2044118528375074849 · Twitter Post
• https://twitter.com/thezdi/status/2044167978938237299 · Twitter Post
• https://twitter.com/CVEnew/status/2044358557701697804 · Twitter Post
• https://reddit.com/r/privacychain/comments/1sm02gg/0day_the_ghostpacket_infestation_cvss_98_rce · Reddit Post
• https://twitter.com/Mahendrak29/status/2044244775340257720 · Twitter Post