CISA Warns of Windows Ancillary Function 0

Cybersecuritynews •Abinaya • August 13, 2026

The U.S. Cybersecurity and Infrastructure Security Agency has added a Microsoft Windows vulnerability to its Known Exploited Vulnerabilities Catalog, warning that the flaw is being exploited in attacks. The issue, tracked as CVE-2026-68820, is a use-after-free vulnerability affecting the Windows Ancillary Function Driver for WinSock. An authorized attacker could exploit the issue locally to elevate […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Alerts on Exploitation of Windows Ancillary Function Vulnerability CVE-2026-68820 The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned of active exploitation of a Microsoft Windows vulnerability, CVE-2026-68820, which is a use-after-free flaw in the Windows Ancillary Function Driver for WinSock. This vulnerability allows an authorized attacker to elevate privileges locally. CISA added the vulnerability to its Known Exploited Vulnerabilities Catalog on August 11, 2026. The first public proof of concept (PoC) was released on August 13, 2026. Organizations using affected Windows systems are at risk, and immediate action is recommended to mitigate potential attacks. The vulnerability highlights the ongoing challenges in securing Windows environments against privilege escalation attacks. 3 sources 70

Extracted Entities

CISA Warns of Windows Ancillary Function 0

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)