Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability

A race condition vulnerability has been identified in the Windows Ancillary Function Driver for WinSock. This vulnerability allows an authorized attacker to elevate privileges locally by exploiting improper synchronization in concurrent execution with shared resources.

Impact

Successful exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security updates provided in the Microsoft Knowledge Base articles KB5063950, KB5063906, KB5063947, KB5063888, and KB5063948. These updates are available through the Microsoft Update Catalog.