CVE record · 6 sources
CVE-2026-68820
KEVCVSS 10.0Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
- Vendor
- Microsoft
- Product
- Windows Ancillary Function Driver for WinSock
- CVSS
- 10.0
- EPSS
- 0.039 (p90)
- CISA KEV
- listed
- Exposure class
- Operating system, Browser, Edge / VPN / firewall, Database
Coverage
7Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.
-
September 2026 Patch Tuesday
What's happened since August Patch Tuesday It's been an active month between cycles. Since Microsoft's August 11 release, five Microsoft CVEs have been confirmed exploited in the wild, and Google shipped an emergency Chrome fix…
-
The August 2026 Security Update Review
I’ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the “ new normal ”, it’s time to readjust what we consider a true bug…
-
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-20349 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Firewall Threat…
-
August 2026 Patch Tuesday
Regardless of what everyone thinks about AI, it’s clear that patch acceleration based on identified vulnerabilities is forcing the patch management industry to deal with the Patch Apocalypse. The magic question is how do you deal…
-
CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
-
August 2026 CVE Landscape
In August 2026, Insikt Group® identified 73 high-impact vulnerabilities that should be prioritized for remediation, 43 of which had a Very Critical Recorded Future Risk Score. This represents a 14% decrease from last month.