PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-45596 Microsoft CVE debrief

CVE-2026-45596 is a HIGH severity vulnerability in Windows Ancillary Function Driver for WinSock. The vulnerability is caused by a use-after-free issue, which allows an authorized attacker to elevate privileges locally. The CVSS score for this vulnerability is 7.0, with a CVSS vector of CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

Vendor
Microsoft
Product
Windows 10 Version 1607
CVSS
HIGH 7
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-09
Original CVE updated
2026-06-11
Advisory published
2026-06-09
Advisory updated
2026-06-11

Who should care

Administrators and users of Windows operating systems should be aware of this vulnerability and take necessary actions to mitigate it.

Technical summary

The vulnerability is caused by a use-after-free issue in Windows Ancillary Function Driver for WinSock. This allows an authorized attacker to elevate privileges locally.

Defensive priority

HIGH

Recommended defensive actions

  • Apply patches from Microsoft as soon as possible.
  • Review and update Windows Ancillary Function Driver for WinSock to the latest version.
  • Monitor system logs for suspicious activity.

Evidence notes

The CVE record and NVD detail pages provide additional information about the vulnerability.

Official resources

CVE-2026-45596 was published on 2026-06-09T17:17:27.720Z and modified on 2026-06-11T15:07:46.037Z.