cve 2026 25178

  1. CVE-2026-25178: Windows AFD.sys Local Privilege Escalation

    A new use‑after‑free vulnerability (CVE‑2026‑25178) has been published in Microsoft’s “Ancillary Function Driver for WinSock” (AFD.sys) that allows an authorized local user to elevate privileges, and the vendor has listed the issue in its Security Update Guide. (msrc.microsoft.com) Summary —...