Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
Microsoft · Windows
Date added (CISA)
2025-02-11
Remediation due
2025-03-04
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.