NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2023-21768

CVSS 3.1: 7.8 high
EPSS: 65%p99
Published: Jan 10, 2023 · Jan 10, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-21768 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Vendors: microsoft

Products: windows 11, windows server 2022

Weakness: CWE-822

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (65.4%)

In the news

3 stories

Microsoft Patch Tuesday for January 2023 fixed actively exploited zero

Security AffairsJan 11, 08:05 UTC · Jan 11, 2023VulnerabilityExploitedCVE-2023-21674 CVE-2023-21549 CVE-2023-21561+582 · 1 read

60

Microsoft Patch Tuesday for January 2023 — Snort rules and prominent vulnerabilities

Cisco TalosJan 10, 20:28 UTC · Jan 10, 2023VulnerabilityCVE-2023-21743 CVE-2023-21535 CVE-2023-21548+132 · 1 read

60

Researchers Release POC for Windows WinSock Ancillary Privilege Escalation Vulnerability

Public POC for CVE-2023-21768 enables local attackers to escalate to SYSTEM privileges on Windows 11 22H2 through the afd.sys driver.

Cyber Security NewsNov 2, 11:57 UTC · 1d agoExploit / PoCCVE-2023-217681

50