Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4358 articles · 196331 vulns · 36/41 feeds (7d)
← Back to list
7.0
CVE-2026-68820KEVEXPLOITEDPATCHED
microsoft · windows_10_1607

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Description

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Affected Products

VendorProductVersions
microsoftwindows_10_160710.0.14393.0, 10.0.17763.0, 10.0.19044.0, 10.0.19045.0, 10.0.22631.0, 10.0.22631.0, 10.0.26100.0, 10.0.26200.0, 10.0.28000.0, 6.2.9200.0, 6.2.9200.0, 6.3.9600.0, 6.3.9600.0, 10.0.14393.0, 10.0.14393.0, 10.0.17763.0, 10.0.17763.0, 10.0.20348.0, 10.0.26100.0, 10.0.26100.0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
googlegoogle cloudcert_advisory90%
lenovolenovo computercert_advisory90%
microsoftwindowscert_advisory90%
microsoftmicrosoft windows server 2012 r2cert_advisory90%
microsoftwindows_10_1809cve_cpe95%

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68820(vendor-advisory, patch)

Related News (21 articles)

Tier B
JPCERT/CC
Security Alert: Microsoft Releases August 2026 Security Updates
→ No new info (linked only)
Tier C
Qualys Blog5d ago
CVE-2026-68820 is in KEV. Here Is What CISA BOD 26-04 Actually Requires Now
→ No new info (linked only)
Tier B
CERT-FR7d ago
Bulletin d'actualité CERTFR-2026-ACT-035 (17 août 2026)
→ No new info (linked only)
Tier D
Infosecurity Magazine11d ago
Lazarus Used Post-Quantum Key Exchange to Deliver Zero-Day
→ No new info (linked only)
Tier D
The Record11d ago
Microsoft’s massive Patch Tuesday releases continue as AI reshapes bug discovery
→ No new info (linked only)
Tier D
Help Net Security11d ago
Lazarus hackers pair fake job offers with Windows zero-day exploit
→ No new info (linked only)
Tier D
Help Net Security11d ago
Microsoft patches 400+ vulnerabilities, one zero-day under attack (CVE-2026-68820)
→ No new info (linked only)
Tier D
SecurityWeek11d ago
Fresh Windows Zero-Day Exploited in North Korean Cyberattacks
→ No new info (linked only)
Tier D
Infosecurity Magazine11d ago
Microsoft Fixes 400 Flaws on August Patch Tuesday
→ No new info (linked only)
Tier B
BSI Advisories11d ago
[NEU] [kritisch] Microsoft Windows Produkte: Mehrere Schwachstellen
→ No new info (linked only)
Tier D
Heise Security11d ago
Patchday: Angreifer attackieren Windows und verschaffen sich System-Rechte
→ No new info (linked only)
Tier D
CSO Online12d ago
Patch Tuesday August 2026: A zero-day WinSock driver hole under exploit, and a maximum severity SAP vulnerability
→ No new info (linked only)
Tier B
CERT-FR12d ago
Multiples vulnérabilités dans Microsoft Windows (12 août 2026)
→ No new info (linked only)
Tier C
VulDB12d ago
CVE-2026-68820 | Microsoft Windows up to Server 2025 Ancillary Function Driver for WinSock use after free
→ No new info (linked only)
Tier C
Cisco Talos12d ago
Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities
→ No new info (linked only)
Tier C
Qualys Blog12d ago
Microsoft Patch Tuesday, August 2026 Security Update Review
→ No new info (linked only)
Tier D
The Hacker News12d ago
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack
→ No new info (linked only)
Tier D
SecurityWeek12d ago
August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day
→ No new info (linked only)
Tier D
BleepingComputer12d ago
Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days
→ No new info (linked only)
Tier A
Microsoft MSRC12d ago
CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
→ No new info (linked only)
Tier C
CrowdStrike Blog13d ago
August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEs
→ No new info (linked only)
CVSS 3.17.0 HIGH
VectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA KEV✅ Yes
Actively exploited✅ Yes
Patch available
10.0.14393.941810.0.17763.911510.0.19044.766310.0.19045.766310.0.22631.751710.0.26100.916810.0.26200.916810.0.28000.27046.2.9200.262796.3.9600.2333710.0.20348.549910.0.26100.33296
CWECWE-416
PublishedAug 11, 2026
Last enriched12d ago
Trending Score72
Source articles21
Independent16
Info Completeness5/14
Missing: vendor, product, versions, epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-69836EXPKEV
Microsoft Entra ID Remote Code Execution Vulnerability
Trending: 128
CRITICALCVE-2026-55040EXPKEV
Microsoft SharePoint Server Security Feature Bypass Vulnerability
Trending: 86
CRITICALCVE-2026-50522EXPKEV
Microsoft SharePoint Remote Code Execution Vulnerability
Trending: 79
HIGHCVE-2026-45586EXPKEV
Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability
Trending: 64
HIGHCVE-2026-50656EXP
Microsoft Defender Elevation of Privilege Vulnerability
Trending: 59

Pin to Dashboard

Verification

State: verified
Confidence: 100%

Vulnerability Timeline

CVE Published
Aug 11, 2026
Added to CISA KEV
Aug 11, 2026
Discovered by ZDM
Aug 11, 2026
Actively Exploited
Aug 21, 2026
Patch Available
Aug 21, 2026