CVE

CVE-2024-38193

Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability

Microsoft · Windows

Date added (CISA)

2024-08-13

Remediation due

2024-09-03

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Associated with

Related to

FudModulecampaignCorrelated cluster2026-09-03
payload · XMRigcampaignCorrelated cluster2026-09-03
JSCealcampaignCorrelated cluster2026-09-02
CVE-2026-68820campaignCorrelated cluster2026-08-11

Description

Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.

Source: NVD ↗ · CISA KEV Catalog ↗