CVE-2024-38193

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

August 13, 2026

Last Seen

September 10, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Lazarus Group Exploits Windows Zero-Day to Target Defense Sector81.0

The North Korean hacking group Lazarus exploited a zero-day vulnerability (CVE-2026-68820) in the Windows Ancillary Function Driver for WinSock (afd.sys) to gain SYSTEM-level access to defense sector systems. This vulnerability was actively exploited for weeks before a patch was released on August 1...

CISA Alerts on Exploitation of Windows Ancillary Function Vulnerability CVE-2026-6882069.9

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned of active exploitation of a Microsoft Windows vulnerability, CVE-2026-68820, which is a use-after-free flaw in the Windows Ancillary Function Driver for WinSock. This vulnerability allows an authorized attacker to elevate pr...