CVE-2026-68820

Published Aug 11, 2026

Last updated 2 months ago

Exploit known CVSS high 7.0

Windows

Zero-day

WinSock

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-68820 is identified as a "Use after free" vulnerability found within the Windows Ancillary Function Driver for WinSock. This flaw enables an authorized attacker to achieve local privilege escalation. The vulnerability was recognized as a zero-day exploit and was actively leveraged in attacks. Microsoft addressed CVE-2026-68820 as part of its August 2026 Patch Tuesday release.

Description: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Source: secure@microsoft.com
NVD status: Analyzed
Products: windows_10_1607, windows_10_1809, windows_10_21h2, windows_10_22h2, windows_11_23h2, windows_11_24h2, windows_11_25h2, windows_11_26h1, windows_server_2012, windows_server_2016, windows_server_2019, windows_server_2022, windows_server_2025

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7
Impact score: 5.9
Exploitability score: 1
Vector string: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Exploit added on: Aug 11, 2026
Exploit action due: Aug 25, 2026
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Weaknesses

secure@microsoft.com: CWE-416

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "14FF7EDA-F43B-4BB4-BC6C-7EFE15382EEB",
            "versionEndExcluding": "10.0.14393.9418",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "matchCriteriaId": "CB3EDBCC-9F4E-49F2-9701-67D2C1F7B47A",
            "versionEndExcluding": "10.0.14393.9418",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "3B36E37E-C661-4F5B-BFAB-8DE7EA3BBF5A",
            "versionEndExcluding": "10.0.17763.9115",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "matchCriteriaId": "490C0819-7717-4869-B85C-2A218E7C50B2",
            "versionEndExcluding": "10.0.17763.9115",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "B27B392C-BA96-4CAA-8368-64DB0C90F204",
            "versionEndExcluding": "10.0.19044.7663",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "94D69542-4258-4423-9815-0191DE06A4E7",
            "versionEndExcluding": "10.0.19045.7663",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "0821B99A-2DDC-4B1E-999A-76EC1D018CD5",
            "versionEndExcluding": "10.0.22631.7517",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "3539AA11-7E3B-4EBC-9427-C2F58A6BA963",
            "versionEndExcluding": "10.0.26100.9106",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "F25F821F-F56B-4150-80B7-9A6108FAA8BD",
            "versionEndExcluding": "10.0.26200.9106",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "645B7F94-BBDA-41B1-825B-6103F2AC2FC9",
            "versionEndExcluding": "10.0.28000.2704",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "14EEFCD3-C815-4CBE-99AB-6AFB40EF2FE9",
            "versionEndExcluding": "10.0.14393.9418",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "7877A816-4EF3-4DA9-81F6-DF77056F329B",
            "versionEndExcluding": "10.0.17763.9115",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "8EBC7E47-4744-4802-B04C-869AA63985A5",
            "versionEndExcluding": "10.0.20348.5440",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "48C0EB1A-5EC0-4916-A812-08E16FEB040A",
            "versionEndExcluding": "10.0.26100.33222",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.