CVE-2026-33824

Microsoft Windows IKE Protocol Double-Free Flaw CVE-2026-33824 Added to CISA KEV Under Active In-the-Wild Exploitation

CISA confirms active in-the-wild exploitation of CVE-2026-33824, an unauthenticated double-free memory corruption flaw in Windows IKE enabling remote root code execution over UDP 500.