CVE-2026-68820: Microsoft Windows Ancillary Function Driver for WinSock
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability. Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.
- CISA KEV-listed (remediation due 2026-08-25)
- EPSS 0.3% (24.6% percentile)
- CVSS 7 high
Related briefings
- State hackers lean on GitHub, Telegram and Discord 2026-09-18
- Microsoft fixes 421 flaws as new Defender zero-day drops 2026-08-12
- Lazarus used a Windows zero-day to hit defense firms 2026-08-11
Linked threat actors
- Lazarus Group machine-inferred link