AheadWire category

Security

Clear coverage of security incidents, vulnerabilities and practical protective actions.

Home › Security

Technology briefing

Latest in Security

Security

CVE-2026-68820: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

CISA added CVE-2026-68820 to its Known Exploited Vulnerabilities catalog for a Windows Ancillary Function Driver for WinSock use-after-free that can allow local privilege elevation; apply vendor mitigations.

2026-08-12

Security

Heap-inspection DoS in Cisco ASA and FTD SSL VPN (CVE-2026-20349)

Cisco disclosed CVE-2026-20349: a heap inspection flaw in Remote Access SSL VPN for Secure Firewall ASA and FTD that can reload devices (DoS). Cisco released hotfixes; CISA added it to KEV with a short remediation window.

2026-08-12