CVE-2024-38193Vulnerability
Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by Check Point Research · last reported
Last reported 2 months ago
CISA KEVAdded 13 Aug 2024
Fix due 3 Sep 2024
Used by ransomware: not knownCISA KEV catalogue
Fix due 3 Sep 2024
Used by ransomware: not knownCISA KEV catalogue
EPSS28.7%
higher than 98% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 98% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
Shattering the Dream – When a Job Offer Becomes a Zero-Day Attack“In 2024, FudModule was reported to use another zero-day, CVE-2024-38193, a use-after-free vulnerability in the same afd.sys driver.”
Indicators reported together
named in the same reports- 2b4987c07a3d9a9a…c92874265ca8in 1 report
- 3a02d0d798e8d355…5d259516525ain 1 report
- 92106b0c62a0a426…c70cfe98afa1in 1 report
- 396192d92d17ace1…8e4934b3c82cin 1 report
- f7e620134ca93506…cc9b75afda4din 1 report
- 75b93a7103b0562f…4469a7f096f1in 1 report
- a45144d22cac70a4…ac863d6cc7e2in 1 report
- 1de949c71efcfb0f…8c535d7ad86cin 1 report
- 4c9b804d6155b29f…6bf2026768d9in 1 report
- 29e24c007549e513…53bd3f4533a2in 1 report
- 4ebdce2f47c23ff8…926890adc105in 1 report
- c2aa28bb5e2a749c…ee5fb4167461in 1 report
- 2db25ac41a66aa52…bd7232e141ebin 1 report
- 5278ee922838352f…97dfd088696din 1 report
- b4082d21070d9ddf…35e458d21afbin 1 report
- fb3fc5626f68677f…6a8210139a2din 1 report
- ea7056f2bf36c66a…c2504db2c619in 1 report
Copy these 17 indicators · defanged
Also named with it: CVE-2025-49113, CVE-2026-68820, CVE-2025-60719
Thanks — we review every report.