CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Apr 18, 2022

CVE-2011-2005

High

EPSS 67.1%CISA KEV

Microsoft/Ancillary Function Driver (afd.sys)

Description

afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application.

EPSS — Exploit Probability

67.1%

Higher than 98.5% of all CVEs

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2011-2005

Risk Assessment

HIGH

In CISA KEV

High EPSS

Details

Severity: High
EPSS: 67.1%
CISA KEV: Yes
Ransomware: Unknown
Articles: 0

Timeline

Published

Mar 28, 2022

Added to KEV

Mar 28, 2022

Remediation Due

Apr 18, 2022

Affected Product

Microsoft

Ancillary Function Driver (afd.sys)

View all Microsoft CVEs

External Links

NVD (NIST)CVE Details MITRE CVE