MSRC-CVE-2021-38628 — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

2021-09-23 #2
For all CVEs affecting Windows that were released on September 14, 2021: 1) In the Security Updates table, the Build Numbers for KB KB5005565 have been corrected for all affected editions of the following versions of Windows 10: Windows 10, version 2004, all editions; Windows Server, version 2004 (Server Core installation); Windows 10, version 20H2; Windows Server, version 20H2 (Server Core Installation); Windows 10, version 21H1. 2) For CVEs where Windows Server 2022 is affected the links have been updated to point to information related to [5005575](https://support.microsoft.com/en-us/help/5005575). Customers whose Windows devices are configured to receive automatic updates do not need to take any further action.
2021-09-14 #1
Information published.

CVE-2021-38628 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38628
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss