Microsoft disclosed CVE-2026-41088 on May 12, 2026, as an Important-rated Windows Ancillary Function Driver for WinSock elevation-of-privilege vulnerability that allows a locally authorized attacker to gain SYSTEM privileges after exploiting external control of a file name or path. That dry...