npcap

Npcap Npcap is a packet capture and injection library for Windows by the Nmap Project. It is a complete update to the unmaintained WinPcap project with improved speed, reliability, and security. Documentation The complete documentation for Npcap is available in the Npcap Guide on npcap.com. There...

CVE-2023-21768-AFD-for-WinSock-EoP-exploit

CVE-2023-21768-AFD-for-WinSock-EoP-exploit 分析文章在这里： https://mp.weixin.qq.com/s/9W9puJltbK-xto2A1duqgQ https://www.zoemurmure.top/posts/cve202321768/ 根据 Patch Tuesday - Exploit Wednesday: Pwning Windows Ancillary Function Driver for WinSock afd.sys in 24 Hours 自己编写出来的，添加了提权后的 cleanup...

CVE-2023-21768

CVE-2023-21768 Windows Ancillary Function Driver for WinSock Según la descripción detallada de CVE-2023-21768 publicada por Microsoft Security Response Center MSRC, la vulnerabilidad existe en el Ancillary Function Driver AFD, cuyo nombre de archivo en el sistema es afd.sys. El módulo AFD es el...

CVE-2023-21768-dotnet

CVE-2023-21768 - Dotnet Puerto .NET / C del exploit AFD-for-WinSock-EoP Referencias: https://github.com/zoemurmure/CVE-2023-21768-AFD-for-WinSock-EoP-exploit https://github.com/chompie1337/WindowsLPEAFDCVE-2023-21768 ¿Por qué? A veces no puedes usar binarios compilados. ¿Cómo? Ejecuta lo siguient...

CVE-2026-68820-Mitigation-PoC-

CVE-2026-68820: Windows WinSock afd.sys UAF - Mitigation & Detection PoC 📌 Descripción General Este repositorio contiene una demostración educativa de la mitigación para CVE-2026-68820 , una vulnerabilidad crítica de tipo Use-After-Free UAF en el driver afd.sys de Windows. Contexto de la...

CVE-2026-72927

Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally...

CVE-2026-50349

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-73661

Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally...

CVE-2026-72927

CVE-2026-72927 is a heap-based buffer overflow in Winsock (the Windows Sockets implementation) that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 score is 6.7 (MEDIUM) with vector AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating that high privileges are already requir...

CVE-2026-70342

CVE-2026-70342 affects the Windows Ancillary Function Driver for WinSock (AFD). The vulnerability is a use after free flaw that allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.1 (HIGH) , with a vector of network-based, high complexity, no privileges r...

EUVD-2026-73076

Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-73179

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

Winsock Elevation of Privilege Vulnerability

Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally...

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems allows attackers to disclose protected information.

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the transmission of critical information in open text. Exploiting this vulnerability can allow an attacker to disclose protected information...

Patch Tuesday - August 2026

Microsoft is publishing 421 vulnerabilities on August 2026 Patch Tuesday, including 236 vulnerabilities in Windows. This is lower volume than last month’s record-breaking behemoth, but still one of the largest Patch Tuesday totals ever. There is no reason to suppose that Patch Tuesday will ever...

CVE-2026-70307

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-68820

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

EUVD-2026-56564

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...