Skip to content
Threat Feed

Product

Windows Ancillary Function Driver for Winsock

6 briefs RSS
high advisory

Public Proof-of-Concept for CVE-2023-21768 Local Privilege Escalation

Public availability of multiple proof-of-concept exploits for CVE-2023-21768, a local privilege escalation vulnerability in the Windows Ancillary Function Driver (AFD), increases the risk of local users elevating processes to SYSTEM privileges.

Windows 11 +2 windows privilege-escalation cve
1t 1c
critical threat

August 2026 Microsoft Security Update Analysis

Microsoft's August 2026 security release addresses 415 vulnerabilities, including a zero-day (CVE-2026-68820) exploited in the wild that enables local privilege escalation in the Windows Ancillary Function Driver for WinSock.

exploited Windows +7 vulnerability-management patch-tuesday privilege-escalation
1t 5c updated
high advisory

CVE-2026-41088: Windows Ancillary Function Driver for WinSock Local Privilege Escalation

CVE-2026-41088 is a vulnerability in Windows Ancillary Function Driver for WinSock that allows an authorized attacker to elevate privileges locally due to external control of file name or path.

Windows Ancillary Function Driver for WinSock privilege-escalation windows cve
2r 1t 1c
high advisory

CVE-2026-35416 - Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

CVE-2026-35416 is a use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock, enabling a locally authorized attacker to escalate privileges.

Windows Ancillary Function Driver for WinSock privilege-escalation use-after-free windows
2r 1t 1c
high advisory

CVE-2026-34345 - Windows Ancillary Function Driver for WinSock Race Condition Privilege Escalation

CVE-2026-34345 describes a race condition vulnerability in Windows Ancillary Function Driver for WinSock, allowing an authorized attacker to elevate privileges locally.

Windows Ancillary Function Driver for WinSock privilege-escalation race-condition windows
2r 1t 1c
high advisory

CVE-2026-34344 - Windows Ancillary Function Driver for WinSock Type Confusion Vulnerability

CVE-2026-34344 is a type confusion vulnerability in the Windows Ancillary Function Driver for WinSock, allowing an authorized local attacker to elevate privileges.

Windows Ancillary Function Driver for WinSock type-confusion privilege-escalation windows
2r 1t 1c