CVE-2025-32709
NVD has not published a description yet.
Am I affected?
Sign in and add the software you use to your watchlist: we check it against every new vulnerability.
CISA says: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Show me how to fix itTimeline
- Added to CISA known exploited list
- First covered by RedTeamDaily
Coverage
Public proof-of-concept released for patched Windows WinSock privilege escalation flaw CVE-2023-21768
A public proof-of-concept exploit for CVE-2023-21768 targets the afd.sys Windows kernel driver and lets a local user with low privileges gain SYSTEM rights, with the full chain reported working on Windows 11 22H2. Microsoft patched the flaw in January 2023, and IBM published the researchers' analysis on 21 March 2023. The exploit does not provide a direct remote route in.
Sources: NVD and CISA known exploited vulnerabilities catalogue.