CVE-2025-21418

Published Feb 11, 2025

Last updated 10 days ago

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2025-21418 is an elevation of privilege vulnerability found in the Windows Ancillary Function Driver for WinSock (AFD.sys). This driver interacts with the Windows Sockets API, which applications use for internet communication. Successful exploitation allows an authenticated user with local access to escalate their privileges to SYSTEM level. This vulnerability affects all supported versions of Windows desktop and server operating systems. It's been observed being actively exploited in the wild, and the attack is characterized by low complexity and no requirement for user interaction. Similar vulnerabilities in the same Windows component have been previously exploited.

Description: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Source: secure@microsoft.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
Exploit added on: Feb 11, 2025
Exploit action due: Mar 4, 2025
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weaknesses

secure@microsoft.com: CWE-122
nvd@nist.gov: NVD-CWE-noinfo

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 1

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "CFBEF986-E905-4BB5-B385-235915023D89",
            "versionEndExcluding": "10.0.10240.20915"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "1BFC22FD-A703-4D65-9126-955BB9540340",
            "versionEndExcluding": "10.0.10240.20915"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "B5BC47F5-150E-4D18-8CC4-356F22171D81",
            "versionEndExcluding": "10.0.17763.6893"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "E448ECB4-CE46-4A29-A092-5A4D334E5535",
            "versionEndExcluding": "10.0.17763.6893"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A932CBA3-651F-4BBA-968A-2D6CA7DF8506",
            "versionEndExcluding": "10.0.19044.5487"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "810C8ECB-619F-447C-B352-E66F7EF5216E",
            "versionEndExcluding": "10.0.19045.5487"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "30AF7170-5722-4C9C-A8AD-7A9F0C5952EE",
            "versionEndExcluding": "10.0.22621.4890"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "62FFD367-FB8B-48CA-813F-760E4F393555",
            "versionEndExcluding": "10.0.22631.4890"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B9C5B9BC-F08B-49F8-82D3-7CC6BDB68995",
            "versionEndExcluding": "10.0.26100.3194"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "273EE4B9-8B53-4387-98C8-EC5D2558DB82",
            "versionEndExcluding": "10.0.17763.6893"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1711CDE0-4C93-40D3-91B7-DE507143A45F",
            "versionEndExcluding": "10.0.20348.3207"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D3106289-A3E3-4508-B118-17BD2488D681",
            "versionEndExcluding": "10.0.25398.1425"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "C5C38103-E0F4-4302-98CE-BD8B20460004",
            "versionEndExcluding": "10.0.26100.3194"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]