CVE-2026-45601

8th percentile - higher than 8% of all known CVEs

A race condition in the Windows Ancillary Function Driver for WinSock (AFD.sys) allows an authorized attacker to elevate privileges locally. The vulnerability stems from improper synchronization when accessing shared resources concurrently.

The organization faces the risk of an attacker gaining elevated system privileges, potentially leading to data theft, malware installation, or lateral movement within the network.

Apply the security update provided by Microsoft for the vulnerable AFD.sys driver immediately. This patch addresses the race condition and prevents privilege escalation.