cve-2026-45601

CVE-2026-45601 is a Microsoft-disclosed elevation-of-privilege vulnerability in the Windows Ancillary Function Driver for WinSock (AFD). Classified as Important, it allows a locally authenticated attacker to gain SYSTEM privileges by winning a race condition. The flaw affects both Windows client and server releases. While Microsoft assesses exploitation as less likely and the bug is not remotely exploitable, it represents a typical kernel-adjacent local privilege escalation that can turn an initial foothold into full machine compromise. Administrators should prioritize patching to close this post-compromise risk across their Windows fleets.