Exploited Vulnerabilities DailyCVE-2011-2005: Microsoft Ancillary Function Driver (afd.sys)
EPSS31.7%No. 996 of 1739 in KEV
CVE year2011~11 yrs before listing
Same vendor in KEV389
Same product1
| Field | Value |
|---|---|
| Vendor | Microsoft |
| Product | Ancillary Function Driver (afd.sys) |
| Name | Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability |
| Added to KEV | 2022-03-28 |
| US federal due date | 2022-04-18 |
| Ransomware use | Unknown |
| CWE | CWE-264 |
CISA description
afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Microsoft Ancillary Function Driver (afd.sys) vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2022-03-28.