coldbraid

CVE-2011-2005 Microsoft Ancillary Function Driver (Afd.Sys)

afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application.

CVSS
not scored

CWE-264

On CISA’s exploited list

Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability

Added
2022-03-28
Federal patch deadline
2022-04-18
Ransomware use
not known

Actors known to use it (MITRE ATT&CK)