CISA Known Exploited Vulnerability

CVE-2024-38193

Microsoft · Windows

Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability

Date added
BOD 22-01 due date
CWE CWE-416
Ransomware Unknown

CISA description

Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.