CVE-2025-32709

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  • Published May 13, 2025
  • CVSS 7.8 high
  • 2.2% chance of exploitation in the next 30 days (EPSS)
  • In CISA's Known Exploited Vulnerabilities catalog

Affected software

CVE-2025-32709 at the National Vulnerability Database