CVE-2025-21418 Microsoft Windows
Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
- Added
- 2025-02-11
- Federal patch deadline
- 2025-03-04
- Ransomware use
- not known