CVE-2026-68820

Microsoft Windows Ancillary Function Driver for WinSock Vulnerability

Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.

CVSS Score

9.8

CRITICAL

Published

11 Aug 2026 00:00

Modified

N/A

Vendor

Microsoft

Product

Windows Ancillary Function Driver for WinSock

Source

CIRCL

Affected Versions

Fix Vendor Patch / Mitigation Available

Weaknesses (CWE)

CWE-416

References

nvd.nist.gov /vuln/detail/CVE-2026-68820 cve.circl.lu /cve/CVE-2026-68820 cve.mitre.org /cgi-bin/cvename.cgi vuldb.com /

Affected Systems

Microsoft

Windows Ancillary Function Driver for WinSock

Microsoft

Windows Ancillary Function Driver For WinSock

SharePoint

Active Directory Federation Services

SharePoint Server

Windows

DirectX

Internet Explorer

Defender

Microsoft

Office

Visual Basic For Applications (VBA)

External Links

NVD Database CIRCL CISA KEV

KEV Status

Known Exploited Vulnerability