Skip to main content

Severity by source

NVD PRIMARY
7.0 HIGH
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 21:55 vuln.today
CVE Published
Mar 10, 2026 - 18:18 nvd
HIGH 7.0

DescriptionCVE.org

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

AnalysisAI

Windows Ancillary Function Driver for WinSock (AFD) in Windows 11 versions 24h2 and 26h1 contains a use-after-free vulnerability (CWE-416) that allows authenticated local attackers to escalate privileges through memory corruption. An attacker with local access could exploit this flaw to gain elevated system permissions, though no official patch is currently available.

Technical ContextAI

Classified as CWE-416 (Use After Free). Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

RemediationAI

Monitor vendor advisories for a patch.

CVE-2026-47291 CRITICAL POC
9.8 Jun 09

Remote code execution in Microsoft Windows HTTP.sys allows unauthenticated network attackers to execute arbitrary code b

CVE-2026-42904 CRITICAL
9.6 Jun 09

Privilege elevation in the Windows TCP/IP networking stack allows an unauthenticated attacker on an adjacent network to

CVE-2026-25173 HIGH POC
8.0 Mar 10

Remote code execution in Windows RRAS affects Windows 10 1607 and Windows Server 2022 23h2 through an integer overflow v

CVE-2026-44812 HIGH
7.8 Jun 09

Local code execution in Microsoft Windows Win32K GRFX (graphics) subsystem allows an attacker with low-privilege local a

CVE-2026-44803 HIGH
7.8 Jun 09

Local code execution in the Windows Win32K GRFX (graphics) subsystem allows an unauthorized attacker with the ability to

CVE-2026-42991 HIGH
7.8 Jun 09

Local privilege escalation in Microsoft Windows Push Notifications service stems from a race condition (CWE-362) that an

CVE-2026-42979 HIGH
7.8 Jun 09

Local privilege escalation in Microsoft Windows Push Notifications service stems from a race condition (CWE-362) that an

CVE-2026-42977 HIGH
7.8 Jun 09

Local privilege escalation in Windows Push Notifications enables an authenticated low-privileged user to elevate to high

CVE-2026-42978 HIGH
7.8 Jun 09

Local privilege escalation in Microsoft Windows Push Notifications service stems from a race condition (CWE-362) in conc

CVE-2026-49160 HIGH POC
7.5 Jun 09

Remote denial-of-service in Microsoft's HTTP/2 implementation allows unauthenticated network attackers to exhaust server

CVE-2026-45640 HIGH
7.0 Jun 09

Local privilege escalation in the Windows Bluetooth Port Driver allows an authorized low-privileged attacker to elevate

CVE-2026-34335 HIGH
7.0 Jun 09

Local privilege escalation in the Windows Ancillary Function Driver for WinSock (AFD.sys) allows an authenticated low-pr

Share

CVE-2026-25178 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy