CVE-2026-32073

CVE-2026-32073 is a use-after-free vulnerability in Windows Ancillary Function Driver for WinSock that enables local privilege escalation. The flaw requires an authenticated attacker to exploit and is not currently listed on CISA's Known Exploited Vulnerabilities catalog, indicating no active exploitation in the wild at this time. With a CVSS score of 7.0 (HIGH) and a local attack vector with high complexity requirements, the vulnerability poses a moderate threat with potential for complete system compromise including confidentiality, integrity, and availability impacts. The low EPSS score of 0.00046 and inactive status on threat intelligence hot lists suggest minimal current community attention and exploit availability. Organizations should prioritize patching after vendor updates are released, though this does not appear to be an immediate critical threat based on current exploitation metrics.