winsock afd

The winsock afd tag on WindowsForum.com covers discussions about the Windows Ancillary Function Driver for WinSock, a kernel-level component that brokers network socket operations between user-mode applications and the operating system. Tagged content focuses on security vulnerabilities, specifically local privilege escalation flaws such as CVE-2026-45601 and CVE-2026-34344. These issues allow a locally authenticated attacker to gain SYSTEM privileges by winning a race condition, posing a post-compromise risk. The tag is relevant for IT administrators and security professionals managing Windows client and server fleets, as it highlights the importance of patching these kernel-adjacent vulnerabilities to prevent machine takeover after an initial foothold.