Patch tracker / CVE reference / CVE-2026-33824
CVE-2026-33824
CVE-2026-33824 is a critical severity Microsoft vulnerability with a CVSS score of 9.8. It is in the CISA Known Exploited Vulnerabilities catalog: attackers are using it in the wild, which makes it a fix-first item. Microsoft has shipped the fix: deploy one of the 9 updates below from the Microsoft Update Catalog, and see where this CVE sits against the rest on the patch tracker.
Risk summary
Listed in the CISA Known Exploited Vulnerabilities catalog, confirmed exploited in the wild. EPSS exploit probability 73%. CVSS 9.8 (Critical).
This CVE is among the top 25% of tracked Microsoft CVEs by EPSS exploit probability, and one of 2 actively-exploited CVEs in April 2026.
The strongest signal is CISA's KEV addition on 2026-08-18, confirming active exploitation. EPSS opened at 55.9% that day, spiked to 77.9% on 2026-08-19, then eased slightly to 72.7% by 2026-08-24. The overall trend remains elevated, so IT admins should treat this CVE as a high priority for immediate remediation despite the small pullback.
Drawn by Senserva Vivid from the Senserva change record. Hover any point for its date and value.
- 2026-08-18 EPSS first scored at 55.9%; added to the CISA KEV catalog by CISA
- 2026-08-19 EPSS 55.9% to 77.9%
- 2026-08-24 EPSS 77.9% to 72.7%
Recorded by Senserva on the dates shown, from CISA KEV and FIRST EPSS. This is what moved and when, which neither the vendor advisory nor NVD publishes.
The IKE Service Extensions handle the key exchange behind IPsec and VPN connectivity, so this Critical Severity (CVSS 9.8) Remote Code Execution flaw sits on a port that is often deliberately exposed to the internet. Windows 10 1809 and Windows Server 2019 are affected and EPSS is 64%. VPN gateways built on Windows Server 2019 are the systems where an unauthenticated packet could become full compromise of the box that guards remote access.
Do this: Identify Server 2019 systems with IKE (UDP 500/4500) reachable from the internet and patch those first, today if possible.
AI-generated from public data, 2026-07-07. Verify against the vendor advisory before acting.
Senserva AI Opinion and rich prompt for CVE-2026-33824
Copy this prompt into Claude, ChatGPT, or Copilot. The facts are included, sourced from this page.
Official patch(es) for CVE-2026-33824
Treat as urgent: it is being exploited in the wild (CISA KEV), so patch ahead of items that are not. In Intune or Defender, confirm whether the fixing updates KB5082052, KB5082060, KB5082063, KB5082123, KB5082142, KB5082198, KB5082200, KB5083768, KB5083769 are installed across the affected products. Senserva does this automatically across your tenant and flags every missing patch.
Apply the Microsoft security updates below to fix CVE-2026-33824. Each KB page carries the Microsoft Update Catalog download, Microsoft's known issues for the update, a copy-paste PowerShell check for whether it is installed, and the Senserva AI read.
Scope and sources
- Affected products
- Windows 10 Version 1809 for 32-bit Systems
- Windows 10 Version 1809 for x64-based Systems
- Windows 11 Version 24H2 for x64-based Systems
- Windows 11 Version 25H2 for x64-based Systems
- Windows 11 Version 26H1 for ARM64-based Systems
- Windows 11 version 26H1 for x64-based Systems
- Windows Server 2019
- Windows Server 2025 (Server Core installation)
- Fixed by the same updates
- Authoritative references
Want every Microsoft CVE and the patches that fix it, ranked by real-world risk? See the Microsoft Patch Tracker.