Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability

A vulnerability allowing local privilege escalation has been identified in the Windows Ancillary Function Driver for WinSock. This issue arises from a free of memory not on the heap, which can be exploited by an authorized attacker to gain elevated privileges.

Impact

Exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5073724 for various Windows 10 versions and KB5073723 for Windows Server 2019.