CVE-2026-68820

HIGH7.0Published on August 11, 2026

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVSS score7.0 / 10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-416

Microsoft Fixes 421 Vulnerabilities, Including an Exploited Zero-Day in `afd.sys`

On August 11, 2026, Microsoft released security updates addressing 421 vulnerabilities. One of them is CVE-2026-68820 , a high-severity flaw actively

CISA adds three exploited vulnerabilities to KEV catalog: CVEs in Cisco ASA/FTD, Windows, and Metabase. Organizations must prioritize remediation.

This product uses the NVD API but is not endorsed or certified by the NVD.