CVE CVE

CVE-2025-21418

CISA Known Exploited Vulnerability (KEV)

Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

February 11, 2025

March 4, 2025

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Description

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Weakness Enumeration

CWE-ID CWE Name

CWE-122
Heap-based Buffer Overflow

Details

Source:
NVD
Published:
Updated:

Risk information

CVSS v3

Base score:
7.8
Severity:

HIGH

Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2

Not defined