CVE-2026-21241

—

CVSS 3.1

7.0 high

EPSS

3%p84

Published

Feb 10, 2026 (Feb 10, 2026)

Modified

Jun 17, 2026

Description

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Vendors: microsoft
Products: windows 11 23h2, windows 11 24h2, windows 11 25h2, windows server 2022, windows server 2022 23h2, windows server 2025
Weakness: CWE-416
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.6%)

In the news0 stories

No ingested article mentions this CVE yet.