Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability
Microsoft · Ancillary Function Driver (afd.sys)
Date added (CISA)
2022-03-28
Remediation due
2022-04-18
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application.