CVE-2026-68820

Analyzed

Published: 11 Aug 2026, 17:05

Last modified:13 Aug 2026, 17:35

Vulnerability Summary

Overall Risk (default)

medium

28/100

CVSS Score

7 HIGH

v3.1 (cve.org)

EPSS Score

0.33% LOW

0% probability -0.02%

KEV

Listed

CISA • ENISA

2 listings

Ransomware

No reports

Public exploits

None found

Dark Web

Not detected

Timeline

11 Aug 2026, 17:05

Published

Vulnerability first disclosed

11 Aug 2026, 00:00

Added to CISA KEV

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

11 Aug 2026, 00:00

Added to ENISA KEV

Added to Known Exploited Vulnerabilities catalog

13 Aug 2026, 17:35

Last Modified

Vulnerability information updated

25 Aug 2026, 00:00

CISA Remediation Due

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Description

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVSS Metrics

v3.1•HIGH•Score: 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
v3.1•HIGH•Score: 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 0.33%• Percentile: 26%

Techniques & Countermeasures

CWE-416•Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Affected Systems

microsoft•windows_10_1607
< 10.0.14393.9418
microsoft•windows_10_1809
< 10.0.17763.9115
microsoft•windows_10_21h2
< 10.0.19044.7663
microsoft•windows_10_22h2
< 10.0.19045.7663
microsoft•windows 10 version 1607
≥ 10.0.14393.0, < 10.0.14393.9418
microsoft•windows 10 version 1809
≥ 10.0.17763.0, < 10.0.17763.9115
microsoft•windows 10 version 21h2
≥ 10.0.19044.0, < 10.0.19044.7663
microsoft•windows 10 version 22h2
≥ 10.0.19045.0, < 10.0.19045.7663
microsoft•windows_11_23h2
< 10.0.22631.7517
microsoft•windows_11_24h2
< 10.0.26100.9106
microsoft•windows_11_25h2
< 10.0.26200.9106
microsoft•windows_11_26h1
< 10.0.28000.2704
microsoft•windows 11 version 23h2
≥ 10.0.22631.0, < 10.0.22631.7517
microsoft•windows 11 version 24h2
≥ 10.0.26100.0, < 10.0.26100.9168
microsoft•windows 11 version 25h2
≥ 10.0.26200.0, < 10.0.26200.9168
microsoft•windows 11 version 26h1
≥ 10.0.28000.0, < 10.0.28000.2704
microsoft•windows_server_2012
na | r2 | ≥ 6.2.9200.0, < 6.2.9200.26280
microsoft•windows server 2012 r2
≥ 6.3.9600.0, < 6.3.9600.23338
microsoft•windows server 2012 r2 (server core installation)
≥ 6.3.9600.0, < 6.3.9600.23338
microsoft•windows server 2012 (server core installation)
≥ 6.2.9200.0, < 6.2.9200.26280
microsoft•windows_server_2016
< 10.0.14393.9418 | ≥ 10.0.14393.0, < 10.0.14393.9418
microsoft•windows server 2016 (server core installation)
≥ 10.0.14393.0, < 10.0.14393.9418
microsoft•windows_server_2019
< 10.0.17763.9115 | ≥ 10.0.17763.0, < 10.0.17763.9115
microsoft•windows server 2019 (server core installation)
≥ 10.0.17763.0, < 10.0.17763.9115
microsoft•windows_server_2022
< 10.0.20348.5440 | ≥ 10.0.20348.0, < 10.0.20348.5499
microsoft•windows_server_2025
< 10.0.26100.33222 | ≥ 10.0.26100.0, < 10.0.26100.33296
microsoft•windows server 2025 (server core installation)
≥ 10.0.26100.0, < 10.0.26100.33296