CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–3 of 3 advisories (Page 1/1)

CVE-2025-214187.8/HIGHEPSS 2.1%CISA KEV

2025-02-11

Windows Ancillary Function Driver (afd.sys) Elevation of Privilege Vulnerability (CVE-2025-21418) Technical Analysis and Mitigation Guide

[Affected Scope] All supported versions of Windows 10, 11, and Windows Server utilizing the WinSock Ancillary Function Driver (afd.sys)

[Impact] Local attackers can trigger kernel memory corruption (Heap-based Buffer Overflow) to execute arbitrary code with SYSTEM privileges

[Mitigation] Immediately apply the Microsoft February 2025 Patch Tuesday cumulative updates and restrict unauthorized local execution privileges

CVE-2024-381937.8/HIGHEPSS 28.7%CISA KEV

2024-08-13

[Affected Scope] Most versions of Windows 10, 11, and Windows Server 2008 through 2022

[Impact] Local attackers can exploit kernel memory corruption to execute arbitrary code with SYSTEM privileges

[Mitigation] Immediately apply the Microsoft August 2024 security updates and monitor for unauthorized local account activities

CVE-2019-12157.8/HIGHEPSS 19.3%CISA KEV

2019-09-11

[Affected Scope] Windows 7, 8.1, 10 and Windows Server 2008, 2012, 2016, 2019 utilizing the ws2ifsl.sys driver

[Impact] Local attackers can execute arbitrary code in kernel mode, leading to complete system takeover and local privilege escalation to SYSTEM

[Mitigation] Apply the official Microsoft security updates immediately and monitor for anomalous Winsock driver calls