CVE-2026-83738
7.0HighPublished 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-362, CWE-416
Impact
A local authenticated attacker can elevate privileges to SYSTEM. They need prior access to run code on the target Windows system.
Root cause
A race condition leading to a use-after-free bug exists in the Windows Ancillary Function Driver for WinSock (afd.sys).
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Install the Microsoft security update for afd.sys referenced in the advisory. No interim workarounds or mitigations are specified.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.