Microsoft update

KB5061197

Security Only

Fixed in

Windows Server 2008 for 32-bit Systems Service Pack 2 6.0.6003.23317
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 6.0.6003.23317
Windows Server 2008 for x64-based Systems Service Pack 2 6.0.6003.23317
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 6.0.6003.23317

TI-2025-23773 CVE-2025-32709 · GHSA-jwq6-vvcv-h2px

CRITICAL 93KEV

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01818 Published 2025-05-13 Fixed in 10.0.10240.21014, 10.0.14393.8066 +12 CWE-416