CVE-2026-25179

High

Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate…

secure@microsoft.com·CWE-1287·Published 2026-03-10

CVSS

7.0

EPSS

0.00

KEV

Exploits

cve.orgen

156 chars

Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

NVDen

156 chars

Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

NVDes

180 chars

Validación incorrecta del tipo de entrada especificado en el controlador de función auxiliar de Windows para WinSock permite a un atacante autorizado elevar privilegios localmente.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.0	—	—	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
3.1	Secondary	NVD	7.0	1.0	5.9