About Elevation of Privilege - Windows Ancillary Function Driver for WinSock (CVE-2026-68820) vulnerability

About Elevation of Privilege - Windows Ancillary Function Driver for WinSock CVE-2026-68820 vulnerability. The Ancillary Function Driver AFD is a Windows component that supports Windows Sockets applications and is contained in the afd.sys file. The afd.sys driver runs in kernel mode and manages t...

CVE-2023-21768-dotnet

CVE-2023-21768 - Dotnet Puerto .NET / C del exploit AFD-for-WinSock-EoP Referencias: https://github.com/zoemurmure/CVE-2023-21768-AFD-for-WinSock-EoP-exploit https://github.com/chompie1337/WindowsLPEAFDCVE-2023-21768 ¿Por qué? A veces no puedes usar binarios compilados. ¿Cómo? Ejecuta lo siguient...

CVE-2026-70342

CVE-2026-70342 affects the Windows Ancillary Function Driver for WinSock (AFD). The vulnerability is a use after free flaw that allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.1 (HIGH) , with a vector of network-based, high complexity, no privileges r...

EUVD-2026-73076

Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50349

A race condition (concurrent execution using a shared resource with improper synchronization) in the Windows Ancillary Function Driver for WinSock allows an authorized attacker with low privileges to escalate privileges locally. The vulnerability is rated CVSS 3.1 7.0 (HIGH) with high impact on c...

CVE-2026-70307

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

EUVD-2026-56564

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-70307

CVE-2026-70307 describes a use-after-free flaw in the Windows Ancillary Function Driver for WinSock that can allow an authorized local attacker to elevate privileges. Affected component is the Windows network stack’s Ancillary Function Driver used by WinSock; root cause is a use-after-free bug in...

CVE-2026-68820

CVE-2026-68820 is a local privilege escalation caused by a use-after-free in the Windows Ancillary Function Driver for WinSock (afd.sys). The vulnerability allows an attacker with code execution on the target to elevate to SYSTEM, as described in NVD/NVD-derived entries and echoed by Krebs/Automo...

CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

EUVD-2026-56468

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-61348

This CVE (CVE-2026-61348) is a local privilege escalation in the Windows Ancillary Function Driver for WinSock. The issue is a use-after-free in the driver component, enabling an authenticated attacker to elevate privileges on the affected system. The provided materials indicate a high-severity i...

CVE-2026-61348 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

EUVD-2026-56323

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-61348

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally...