⚡ Exploit-DB.ai HIGH
HIGH

CVE-2024-38193

Published: March 18, 2026 · Source: National Vulnerability Database (NVD)

⚡ AI Threat Assessment

Windows AFD zero-day EoP exploited by Lazarus Group (North Korean APT) in targeted attacks. Apply August 2024 patches. Prioritize endpoints that are internet-facing or handle sensitive data.

📋 Official Description

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability exploited as zero-day to gain SYSTEM privileges in targeted attacks.

Get Real-Time CVE Alerts

Supernova subscribers receive AI-triaged CVE alerts the moment they're published — before the PoC drops.

Start Supernova — $99/mo →