PatchSiren cyber security CVE debrief
CVE-2026-45598 Microsoft CVE debrief
CVE-2026-45598 is a HIGH severity vulnerability in Windows Ancillary Function Driver for WinSock. The vulnerability is caused by a use-after-free issue, which allows an authorized attacker to elevate privileges locally. The CVSS score for this vulnerability is 7.0, with a CVSS vector of CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.
- Vendor
- Microsoft
- Product
- Windows 10 Version 1607
- CVSS
- HIGH 7
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-09
- Original CVE updated
- 2026-06-11
- Advisory published
- 2026-06-09
- Advisory updated
- 2026-06-11
Who should care
Administrators and users of Windows operating systems should be aware of this vulnerability and take necessary actions to mitigate it.
Technical summary
The vulnerability is caused by a use-after-free issue in Windows Ancillary Function Driver for WinSock. This allows an authorized attacker to elevate privileges locally.
Defensive priority
HIGH
Recommended defensive actions
- Apply patches from Microsoft as soon as possible.
- Refer to resourceLinkAnnotations with linkId 'ref-4' for vendor advisory.
Evidence notes
The vulnerability is analyzed and has a CWE-362 weakness.
Official resources
-
CVE-2026-45598 CVE record
CVE.org
-
CVE-2026-45598 NVD detail
NVD
-
Source item URL
nvd_modified
-
Mitigation or vendor reference
[email protected] - Vendor Advisory
CVE-2026-45598 was published on 2026-06-09T17:17:28.033Z and modified on 2026-06-11T15:00:25.877Z.