CVE Catalog

CVE-2026-70307

HighCVSS 7.0
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.27%

19th percentile - higher than 19% of all known CVEs

Summary

A use-after-free vulnerability in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Risk Assessment

An authorized attacker can elevate their privileges in the system, potentially leading to full system control.

Recommendation

Update Windows to the latest version containing the security fix.

Original NVD description (English source)

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS