Product:
Windows IKE Extension
Summary
A double free vulnerability in Windows IKE Extension allows an unauthorized attacker to execute code over a network. This critical flaw can lead to significant impacts on confidentiality, integrity, and availability. Attackers can exploit this vulnerability without requiring any privileges or user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2026-33824 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted network packets to the affected system. The double free condition can be triggered, allowing the attacker to execute arbitrary code in the context of the affected application. Given the low attack complexity and the lack of required privileges, this vulnerability poses a serious risk to systems running the affected product.
Affected Products
- Windows IKE Extension: Vulnerable to unauthorized code execution via crafted network packets.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Users should ensure that their systems are up to date and follow best practices for network security to reduce exposure to potential attacks.