Skip to content
OpenAdvisories
Critical MSRC-CVE-2026-33827 1 CVE

Windows TCP/IP Remote Code Execution Vulnerability

Published Apr 14, 2026 · Updated Apr 14, 2026

Summary

Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition and also to take additional actions prior to exploitation to prepare the target environment.

How could an attacker exploit this vulnerability?
An unauthenticated attacker could send a specially crafted IPv6 packet to a Windows node where IPSec is enabled, which could enable a remote code execution exploitation on that machine.

Security updates
10.0.17763.8644 — https://support.microsoft.com/help/5082123
10.0.20348.5020 — https://support.microsoft.com/help/5082142
10.0.19044.7184 — https://support.microsoft.com/help/5082200
10.0.26100.32690 — https://support.microsoft.com/help/5082063
10.0.26200.8246 — https://support.microsoft.com/help/5083769
10.0.22631.6936 — https://support.microsoft.com/help/5082052
10.0.25398.2274 — https://support.microsoft.com/help/5082060
10.0.28000.1836 — https://support.microsoft.com/help/5083768
10.0.14393.9060 — https://support.microsoft.com/help/5082198
6.2.9200.26026 — https://support.microsoft.com/help/5082127
6.3.9600.23132 — https://support.microsoft.com/help/5082126

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References