CVE-2025-62213CWE-416

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

High · published November 11, 2025

CVSS v3.1
7.0
EPSS
2%
Percentile
77.4
In the wild
Unconfirmed
What it is

⚡ An authorized attacker can leverage a sneaky 'use after free' in the Windows Ancillary Function Driver for WinSock to elevate their privileges with alarming ease! Think of this like a restaurant where a server hands over the kitchen keys to a regular customer. If that customer decides to take over the kitchen, they can whip up whatever they want, compromising the whole menu – or worse, poisoning it! This vulnerability could allow an attacker to gain elevated privileges locally, meaning they could do almost anything on the system: read sensitive data, install malicious software, or even take control of other user accounts. The potential fallout from this is absolutely devastating for system integrity!

Put simply

Think of this like a restaurant where a server hands over the kitchen keys to a regular customer. If that customer decides to take over the kitchen, they can whip up whatever they want, compromising the whole menu – or worse, poisoning it! This use-after-free vulnerability occurs when the Windows Ancillary Function Driver for WinSock improperly handles memory management, allowing an attacker with local access to manipulate the system's memory and escalate privileges.

What to do

This vulnerability could allow an attacker to gain elevated privileges locally, meaning they could do almost anything on the system: read sensitive data, install malicious software, or even take control of other user accounts. The potential fallout from this is absolutely devastating for system integrity! To protect yourself, patch your systems to the latest version as soon as possible! Monitor your environments for unusual behavior and consider implementing additional security measures like user access controls to limit potential exploit opportunities. You've got this! Stay vigilant and apply those patches to keep your systems secure! 🛡️

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.01723 · 77.4th percentile
Weakness
CWE-416 · Use After Free
Published
2025-11-11T17:59Z
EPSS history
Timeline
  • 11 NOV 17:59Z
    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
    cvelistv5