CVE-2026-68820
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. Deadline for federal agencies: 2026-08-25.
18 articles across 11 outlets · first covered Aug 11, 2026 · latest Aug 17, 2026
Associated threat actors
Coverage timeline
-
Critical Metabase SQLi flaw lets attackers seize full admin controlsecurityonline.info · Aug 17, 2026
-
CISA Flags Critical Flaws in Metabase, Windows and Cisco Firewallsecurityaffairs.com · Aug 13, 2026
-
Lazarus Group exploits CVE‑2026‑68820 via fake job offerssecurityaffairs.com · Aug 13, 2026
-
Lazarus Used Post-Quantum Key Exchange to Deliver Zero-Daywww.infosecurity-magazine.com · Aug 12, 2026
-
CVE-2026-61515: Unauthenticated Command Injection in Puwell IP Cameras, PoC Exploit Code Publicly Disclosedsecurityonline.info · Aug 12, 2026
-
Microsoft Fixes 400 Flaws on August Patch Tuesdaywww.infosecurity-magazine.com · Aug 12, 2026
-
Lazarus uses fake job offers to exploit Windows CVE-2026-68820www.securityweek.com · Aug 12, 2026
-
Microsoft patches wormable DNS flaw and critical WinSock zero daysecurityaffairs.com · Aug 12, 2026
-
Lazarus Exploits Windows Zero-Day in Operation Dream Job Attackssecurityonline.info · Aug 12, 2026
-
Microsoft Patch Tuesday Patches Critical WinSock Exploitsecurityonline.info · Aug 12, 2026
-
Microsoft Fixes 421 Flaws Including SharePoint Zero Daywww.rapid7.com · Aug 12, 2026
-
CISA Flags Windows Driver Use After Free Flaw CVE-2026-68820www.cisa.gov · Aug 12, 2026
-
CISA Flags High Risk Windows WinSock Use After Free Flaw in KEVcisa.gov · Aug 11, 2026
-
Microsoft's Patch Tuesday Deluge Continues With August Updateswww.darkreading.com · Aug 11, 2026
-
Microsoft Plugs Nearly 400 Security Holeskrebsonsecurity.com · Aug 11, 2026
-
Microsoft Patch Tuesday August 2026, (Tue, Aug 11th)isc.sans.edu · Aug 11, 2026
-
Microsoft Patch Tuesday Fixes Zero Day Winsock Flaw CVE-2026-68820www.securityweek.com · Aug 11, 2026
-
Lazarus hits defence via fake job PDFs, CVE-2026-68820research.checkpoint.com · Aug 11, 2026