npcap

Npcap Npcap is a packet capture and injection library for Windows by the Nmap Project. It is a complete update to the unmaintained WinPcap project with improved speed, reliability, and security. Documentation The complete documentation for Npcap is available in the Npcap Guide on npcap.com. There...

CVE-2026-68820-Mitigation-PoC-

CVE-2026-68820: Windows WinSock afd.sys UAF - Mitigation & Detection PoC 📌 Overview This repository contains an educational demonstration of the mitigation for CVE-2026-68820 , a critical Use-After-Free UAF vulnerability in the Windows afd.sys driver. Vulnerability context: The vulnerability allo...

CVE-2023-21768-dotnet

CVE-2023-21768 - Dotnet Dotnet / c port of AFD-for-WinSock-EoP exploit References: https://github.com/zoemurmure/CVE-2023-21768-AFD-for-WinSock-EoP-exploit https://github.com/chompie1337/WindowsLPEAFDCVE-2023-21768 Why? Sometimes you can't use compiled binaries. How to? Run the following in...

CVE-2023-21768-AFD-for-WinSock-EoP-exploit

CVE-2023-21768-AFD-for-WinSock-EoP-exploit Analysis articles here: https://mp.weixin.qq.com/s/9W9puJltbK-xto2A1duqgQ https://www.zoemurmure.top/posts/cve202321768/ Written by myself based on Patch Tuesday - Exploit Wednesday: Pwning Windows Ancillary Function Driver for WinSock afd.sys in 24 Hour...

CVE-2023-21768

CVE-2023-21768 Windows Ancillary Function Driver for WinSock According to the detailed description of CVE-2023-21768 published by the Microsoft Security Response Center MSRC, the vulnerability exists in the Ancillary Function Driver AFD, whose system file is afd.sys. The AFD module is the kernel...

CVE-2026-88149

Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-83738

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-70245

Access of resource using incompatible type 'type confusion' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-70237

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-70225

Access of resource using incompatible type 'type confusion' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-70205

Access of resource using incompatible type 'type confusion' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-70195

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally...

CVE-2026-70168

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-88149

A double free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a high severity rating with a CVSS 3.1 score of 7.0. No specific exploit details or direct links to in-th...

CVE-2026-70237

A Use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege elevation . While the CVSS v3.1 score reflects a High severity (7.0) with potential for high impact on confidentiality, integrity, and av...

CVE-2026-83738

A Use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or exploitation links are provided in the documents. Remediation involves applying the official ...

CVE-2026-70225

A type confusion vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability compromise. Remediation is provided via an o...

CVE-2026-70168

A Use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0 (HIGH) . No specific exploit details or remediation steps are provided in...

CVE-2026-70245

A type confusion vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS v3.1 score indicates a High severity (7.8) with impacts on confidentiality, integrity, and availability, spec...

CVE-2026-70195

A use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). While the vulnerability is c...