Windows IKE service double free allows remote code execution

critical severity · exploited in the wild · published 2026-04-14

A double free bug in the Windows Internet Key Exchange (IKE) service extensions could let an attacker run code on the machine remotely. It is already being exploited in the wild.

Fixed in: 10.0.28000.1836

CVE: CVE-2026-33824

Source: Microsoft (MSRC)

Am I affected?

You are affected if the installed version is older than 10.0.28000.1836. Check the version you have and update to 10.0.28000.1836 or later. The fixed version is verified against a vendor or advisory source.

Get the fix

FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 1868 and your operating system.