MicrosoftCVE-2026-70195

Microsoft Windows Ancillary Function Driver for WinSock: use after free

CVE-2026-70195 · Published Oct 13, 2026 · updated Oct 28, 2026

Medium4.7

Fix: upgrade to 10.0.14393.9612 or later (10 fixed versions below)

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.

Affected versions

Package	Affected	Fixed in
Windows 10 Version 1607 Product	>= 10.0.14393.0, < 10.0.14393.9612	10.0.14393.9612
Windows 10 Version 1809 Product	>= 10.0.17763.0, < 10.0.17763.9376	10.0.17763.9376
Windows 10 Version 21H2 Product	>= 10.0.19044.0, < 10.0.19044.7807	10.0.19044.7807
Windows 10 Version 22H2 Product	>= 10.0.19045.0, < 10.0.19045.7807	10.0.19045.7807
Windows 11 Version 23H2 Product	>= 10.0.22631.0, < 10.0.22631.7652	10.0.22631.7652
Windows 11 Version 24H2 Product	>= 10.0.26100.0, < 10.0.26100.9711	10.0.26100.9711
Windows 11 Version 25H2 Product	>= 10.0.26200.0, < 10.0.26200.9711	10.0.26200.9711
Windows 11 Version 26H2 Product	>= 10.0.26300.0, < 10.0.26300.9711	10.0.26300.9711
Windows 11 version 23H2 Product	>= 10.0.22631.0, < 10.0.22631.7652	10.0.22631.7652
Windows 11 version 26H1 Product	>= 10.0.28000.0, < 10.0.28000.3231	10.0.28000.3231
Windows Server 2012 Product	>= 6.2.9200.0, < 6.2.9200.26434	6.2.9200.26434
Windows Server 2012 (Server Core installation) Product	>= 6.2.9200.0, < 6.2.9200.26434	6.2.9200.26434

Details and references