CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows AFD.sys Use-After-Free Local Privilege Escalation Vulnerability (CVE-2026-68820) Security Advisory
[Affected Scope] Systems running Microsoft Windows operating systems utilizing the Ancillary Function Driver for WinSock (afd.sys)
[Impact] An authorized local attacker can exploit kernel memory corruption to execute arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft and restrict unauthorized local access
Windows Ancillary Function Driver (afd.sys) Local Privilege Escalation Vulnerability (CVE-2025-32709) Analysis and Mitigation Guide
[Affected Scope] Windows and Windows Server operating systems utilizing the WinSock Ancillary Function Driver (afd.sys)
[Impact] An authorized local attacker can execute arbitrary code in kernel mode, elevating privileges to SYSTEM, which is actively exploited in the wild
[Mitigation] Immediately apply the official Microsoft security updates and restrict unauthorized local access to critical systems
Windows Ancillary Function Driver (afd.sys) Elevation of Privilege Vulnerability (CVE-2025-21418) Technical Analysis and Mitigation Guide
[Affected Scope] All supported versions of Windows 10, 11, and Windows Server utilizing the WinSock Ancillary Function Driver (afd.sys)
[Impact] Local attackers can trigger kernel memory corruption (Heap-based Buffer Overflow) to execute arbitrary code with SYSTEM privileges
[Mitigation] Immediately apply the Microsoft February 2025 Patch Tuesday cumulative updates and restrict unauthorized local execution privileges
Windows Ancillary Function Driver (afd.sys) Use-After-Free Privilege Escalation Vulnerability (CVE-2024-38193) Technical Analysis and Mitigation Guide
[Affected Scope] Most versions of Windows 10, 11, and Windows Server 2008 through 2022
[Impact] Local attackers can exploit kernel memory corruption to execute arbitrary code with SYSTEM privileges
[Mitigation] Immediately apply the Microsoft August 2024 security updates and monitor for unauthorized local account activities