A use-after-free in the Windows Ancillary Function Driver for WinSock (afd.sys) allows an authorized local attacker with low privileges trigger memory reuse to elevate privileges. Attack vector is local with no user interaction. Mitigate by applying Microsoft’s Aug 11, 2026 security updates from MSRC.