CVE-2026-20810
7.8 highEPSS 0.5%
High (7.8) in microsoft. EPSS 0.5% chance of exploitation in the next 30 days.
Free of memory not on the heap in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Severity
CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
- CWE
- CWE-590
- Published
- Modified
- Record from
- the NVD, synced
Affected
- microsoft:windows_10_1809
- microsoft:windows_10_21h2
- microsoft:windows_10_22h2
- microsoft:windows_server_2019
References
Check your stackJSON