Privilege Escalation Vulnerability in Windows Ancillary Function Driver

Privilege Escalation Vulnerability in Windows Ancillary Function Driver

First seen 10 Mar 2026, 17:28 UTC Api.Msrc.Microsoft 70.5

Article Content

Browse articles
ThreatCluster

A critical vulnerability identified as CVE-2026 allows authorized attackers to elevate privileges locally in Windows systems. The vulnerability stems from either a null pointer dereference or improper input validation in the Windows Ancillary Function Driver for WinSock, affecting users who have access to the system. Immediate action is advised for organizations to mitigate potential exploitation.

Timeline

2026-03-10
CVE-2026 published with details on vulnerabilities
Recent
Emergency patch recommended for affected systems