CyberRota Analysis
AI-GeneratedA use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock allows an authorized attacker to exploit this flaw to elevate their privileges locally on affected Windows systems. This high-severity issue poses a significant risk to system integrity and should be prioritized by organizations using Windows environments, particularly those with sensitive data or critical applications. Immediate patching and mitigation strategies are recommended to prevent potential exploitation.
CISA KEV Details
Status: This CVE is listed in CISA's Known Exploited Vulnerabilities catalog.
Ransomware use: Unknown
Added to KEV: 2026-08-11
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Original NVD Description
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Related CVEs
Other vulnerabilities affecting the same vendor(s)