Microsoft update

KB5061196

Monthly Rollup

Fixed in

Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.27730
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.27730

TI-2025-23773 CVE-2025-32709 · GHSA-jwq6-vvcv-h2px

CRITICAL 93KEV

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01818 Published 2025-05-13 Fixed in 10.0.10240.21014, 10.0.14393.8066 +12 CWE-416