Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability

A vulnerability allowing improper access control has been identified in the Windows Ancillary Function Driver for WinSock. This flaw enables an authorized attacker to locally elevate privileges. The vulnerability affects multiple Windows products, including various versions of Windows 10, Windows 11, Windows Server 2012, Windows Server 2016, Windows Server 2022, Windows Server 2019, and Windows Server 2025.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5075912, KB5075906, KB5075904, KB5075999, KB5075899, KB5077181, KB5077212, KB5075941, KB5075897, KB5075942, KB5075943, and KB5077179.