CVE-2023-21768-dotnet

CVE-2023-21768 - Dotnet Dotnet / c port of AFD-for-WinSock-EoP exploit References: https://github.com/zoemurmure/CVE-2023-21768-AFD-for-WinSock-EoP-exploit https://github.com/chompie1337/WindowsLPEAFDCVE-2023-21768 Why? Sometimes you can't use compiled binaries. How to? Run the following in...

npcap

Npcap Npcap is a packet capture and injection library for Windows by the Nmap Project. It is a complete update to the unmaintained WinPcap project with improved speed, reliability, and security. Documentation The complete documentation for Npcap is available in the Npcap Guide on npcap.com. There...

CVE-2023-21768

CVE-2023-21768 Windows Ancillary Function Driver for WinSock According to the detailed description of CVE-2023-21768 published by the Microsoft Security Response Center MSRC, the vulnerability exists in the Ancillary Function Driver AFD, whose system file is afd.sys. The AFD module is the kernel...

CVE-2026-72927

Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally...

CVE-2026-50349

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-73661

Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally...

CVE-2026-72927

CVE-2026-72927 is a heap-based buffer overflow in Winsock (the Windows Sockets implementation) that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 score is 6.7 (MEDIUM) with vector AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating that high privileges are already requir...

CVE-2026-70342

CVE-2026-70342 affects the Windows Ancillary Function Driver for WinSock (AFD). The vulnerability is a use after free flaw that allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.1 (HIGH) , with a vector of network-based, high complexity, no privileges r...

EUVD-2026-73076

Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-73179

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2023-21768-AFD-for-WinSock-EoP-exploit

CVE-2023-21768-AFD-for-WinSock-EoP-exploit Analysis articles here: https://mp.weixin.qq.com/s/9W9puJltbK-xto2A1duqgQ https://www.zoemurmure.top/posts/cve202321768/ Written by myself based on Patch Tuesday - Exploit Wednesday: Pwning Windows Ancillary Function Driver for WinSock afd.sys in 24 Hour...

CVE-2026-68820-Mitigation-PoC-

CVE-2026-68820: Windows WinSock afd.sys UAF - Mitigation & Detection PoC 📌 Overview This repository contains an educational demonstration of the mitigation for CVE-2026-68820 , a critical Use-After-Free UAF vulnerability in the Windows afd.sys driver. Vulnerability context: The vulnerability allo...

Winsock Elevation of Privilege Vulnerability

Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally...

Patch Tuesday - August 2026

Microsoft is publishing 421 vulnerabilities on August 2026 Patch Tuesday, including 236 vulnerabilities in Windows. This is lower volume than last month’s record-breaking behemoth, but still one of the largest Patch Tuesday totals ever. There is no reason to suppose that Patch Tuesday will ever...

CVE-2026-70307

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-68820

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

EUVD-2026-56564

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-70307

CVE-2026-70307 describes a use-after-free flaw in the Windows Ancillary Function Driver for WinSock that can allow an authorized local attacker to elevate privileges. Affected component is the Windows network stack’s Ancillary Function Driver used by WinSock; root cause is a use-after-free bug in...