What is the CVSS score of CVE-2026-24293?

CVE-2026-24293 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Windows 10 21h2 are affected by CVE-2026-24293?

A privilege escalation vulnerability in Windows Ancillary Function Driver for WinSock (CVE-2026-24293) allows authenticated users to gain elevated system privileges on affected endpoints.. A patch is available.

How to fix or mitigate CVE-2026-24293?

Within 24 hours: Inventory all Windows systems running the affected WinSock driver and restrict local administrative account access to trusted personnel only. Within 7 days: Implement Enhanced Mitigation Experience Toolkit (EMET) or equivalent exploit mitigation controls on critical systems; conduct threat hunting for signs of exploitation. Within 30 days: Establish a continuous monitoring process for patch availability and execute immediate deployment upon release; evaluate network segmentation to limit lateral movement from compromised accounts.

Windows 10 21h2 CVE-2026-24293

HIGH

NULL Pointer Dereference (CWE-476)

2026-03-10 secure@microsoft.com

Denial Of Service Null Pointer Dereference Microsoft Windows 10 21h2 Windows 10 22h2 Windows 11 23h2 Windows 11 24h2 Windows 11 25h2 Windows 11 26h1 Windows Server 2022 Windows Server 2022 23h2 Windows Server 2025

7.8

CVSS 3.1 · Vendor: microsoft

Severity by source

Vendor (microsoft) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (microsoft) · only source for this CVE.

CVSS VectorVendor: microsoft

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 10, 2026 - 18:18 nvd

HIGH 7.8

DescriptionCVE.org

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

AnalysisAI

Privilege escalation in Windows Ancillary Function Driver for WinSock affects Windows 11 24H2, Windows Server 2022, and Windows Server 2025, allowing authenticated local attackers to gain system-level access through null pointer dereference. The vulnerability requires valid user credentials and local access but no user interaction to exploit. No patch is currently available.

Technical ContextAI

Classified as CWE-476 (NULL Pointer Dereference). Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.