Api.Msrc.Microsoft

CVE-2026: Privilege Escalation Vulnerability in Windows Ancillary Function Driver

First seen 12 Feb 2026, 21:16 UTC • Api.Msrc.Microsoft

•12.3

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A vulnerability identified as CVE-2026 has been reported in the Windows Ancillary Function Driver for WinSock. This flaw allows an authorized attacker to elevate privileges locally, posing a risk to affected systems. Two distinct issues have been noted: a use after free condition and improper access control.

How this analysis works

Timeline

2026-02-10

CVE-2026 published

Recent

Vulnerability details disclosed in articles

Attack Flow

Continue Reading

Google Addresses Eighth Chrome Zero-Day Vulnerability in 2025 China-linked Cyber Group Expands Targeting to Southeastern Europe China-Nexus APT UAT-7290 Targets South Asia Telecoms in Cyber Espionage Campaign China-linked UAT-7290 Targets Telcos in Cyberespionage Campaign UAT-7290 Cyber Espionage Targets South Asian Telecoms APT28 Exploits MSHTML Zero-Day Vulnerability in Windows

CVE-2026: Privilege Escalation Vulnerability in Windows Ancillary Function Driver

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading