CVE-2026-57093

CVE-2026-57093 – Windows Ancillary Function Driver for WinSock is a reported use-after-free vulnerability in the WinSock ancillary function driver that can be exploited locally to achieve privilege escalation. The issue affects the specific Windows driver handling WinSock operations; successful e...

CVE-2026-57093 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-57093 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-50462

CVE-2026-50462 affects the Windows Ancillary Function Driver for WinSock. The disclosed issue is external control of a file name or path, enabling an authorized attacker to elevate privileges locally (local privilege escalation). CVSS v3.1 score is 7.8 (High) with Privileges: Low, User Interactio...

CVE-2026-50462 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-50462 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-50312

CVE-2026-50312 is a Windows Ancillary Function Driver for WinSock use-after-free vulnerability that enables local privilege escalation when exploited. The initial description and connected sources confirm the affected component and root cause, and indicate the impact is elevation of privileges fo...

CVE-2026-50312 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-50312 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-57969

Technical details (affected versions, root cause, exploit vectors) are not publicly available in the provided documents. Monitor for updates from official sources and CVE records.

CVE-2026-49174

CVE-2026-49174 describes a vulnerability in Microsoft Windows DNS where missing authentication for a critical function could allow a locally authorized attacker to tamper with DNS behavior. The NVD entry notes a CVSS v3.1 base score of 6.1 (Medium) with a LOCAL attack vector, LOW attack complexit...

CVE-2026-34346

CVE-2026-34346 concerns the Windows Ancillary Function Driver for WinSock. The vulnerability enables an authorized, local attacker to disclose sensitive information due to cleartext transmission of data. The available records (NVD/NVD entry and CVE listing) describe the affected component and the...

CVE-2026-34346 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

...

CVE-2026-34346 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

...

CVE-2026-15699

The CVE-2026-15699 entry concerns a prototype pollution vulnerability in spencermountain compromise (≤ 14.15.1) affecting the Public Root API. Specifically, the function nlp.extend in src/API/extend.js can be exploited by manipulating the plugin argument, leading to improper modification of objec...

MAL-2026-10582 Malicious code in async-mutex-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df420be80a00abb5efead6e83b37885cc37a347641386c0633719197dcb3dc5 Package published as 'async-mutex-v2' advertises itself as a Promise-based mutex but ships no mutex implementation. The main entry index.js exports...

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network...

Azure CycleCloud Elevation of Privilege Vulnerability

Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...

Windows Spaceport.sys Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally...