cve-2026-33100

CVE-2026-33100 is a Windows vulnerability in the Ancillary Function Driver for WinSock (AFD.sys) that allows local privilege escalation. This use-after-free flaw lets an authorized local attacker elevate privileges without user interaction, carrying a CVSS score of 7.0. Microsoft released patches on April 14, 2026, and no public proof-of-concept or confirmed exploitation was reported at the time of disclosure. Discussions on WindowsForum.com emphasize the operational importance of patching this flaw promptly, as it affects Windows systems and could be leveraged for further compromise.