CVE-2026-21236CWE-122

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

High · published February 10, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
37.7
In the wild
Unconfirmed
What it is

⚡ A heap-based buffer overflow in the Windows Ancillary Function Driver for WinSock could let an attacker crank up their privileges without breaking a sweat! Think of it like a sneaky trick in a restaurant where an employee finds a way to access the VIP dining room even though they only work in the kitchen—gaining access to all the exclusive information! If exploited, this vulnerability could allow an attacker to elevate their privileges locally, meaning they could take full control of the system, exposing sensitive data and compromising system integrity—absolutely devastating for security!

Put simply

Think of it like a sneaky trick in a restaurant where an employee finds a way to access the VIP dining room even though they only work in the kitchen—gaining access to all the exclusive information! The flaw allows an authorized attacker to exploit a heap overflow, which occurs when too much data is pushed into a memory buffer, leading to unpredictable behavior and potential privilege escalation.

What to do

If exploited, this vulnerability could allow an attacker to elevate their privileges locally, meaning they could take full control of the system, exposing sensitive data and compromising system integrity—absolutely devastating for security! To mitigate this, make sure to apply the latest Windows updates that address this issue. Regularly audit your systems to ensure there are no unauthorized users with elevated privileges. Secure your Windows environment with robust security practices! You've got this! Follow these steps, and you'll be back to being the security hero in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00445 · 37.7th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-02-10T17:51Z
EPSS history
Timeline
  • 10 FEB 17:51Z
    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
    cvelistv5