CVE-2026-68820

A use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock allows local privilege escalation and is actively exploited in the wild.

This use-after-free flaw in a core Windows networking driver enables an authorized attacker to escalate privileges locally, and it is already being exploited in the wild. DIB organizations must ensure all Windows systems are patched immediately to prevent local compromise and lateral movement. The active exploitation in the wild underscores the critical need for rapid patching and strict endpoint hardening.

Shame score — A core Windows driver vulnerability that allows privilege escalation and is actively exploited in the wild, indicating a severe lapse in Microsoft's patching and vulnerability management.