CVE-2026-34346: Cleartext Transmission of Sensitive Information

Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally...

CVE-2026-50462: External Control of File Name or Path

External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

KB5099444: Windows Server 2012 R2 Security Update (July 2026)

The remote Windows host is missing security update 5099444. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows Message Queuing...

Windows Ancillary Function Driver WinSock Privilege Escalation

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-45596

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-45638

Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-45598

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-45601

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-45603

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-45596

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-42911 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-42911 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-45603

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-45603

The vulnerability CVE-2026-45603 affects Windows’ Ancillary Function Driver for WinSock (AFD). The issue is a use-after-free in the WinSock-related driver, leading to local privilege escalation for an authorized attacker. The CVSS3.1 assessment shows HIGH impact with LOCAL access, HIGH confidenti...

CVE-2026-45638 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-45638

CVE-2026-45638 relates to Windows’ Ancillary Function Driver for WinSock and is due to a use-after-free in that driver. This vulnerability allows an authorized attacker to escalate privileges locally. The available documents specify the affected component and the local-privilege-escalation impact...

CVE-2026-45598

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-45598 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-45598

CVE-2026-45598 is a Windows vulnerability in the Windows Ancillary Function Driver for WinSock described as a use-after-free that enables a local, authorized attacker to achieve privilege elevation . The description is consistent across the NVD entry and the CVE record, noting a LOCAL attack vect...

CVE-2026-34335

Use-after-free in the Windows Ancillary Function Driver for WinSock is the root cause of CVE-2026-34335. The vulnerability can allow an authenticated, local attacker to elevate privileges. The CVSSv3.1 score is 7.0 (High) with local attack vector, high complexity, and requires low privileges and ...