CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Apr 18, 2022

High

CISA KEV

CVE-2011-2005

Microsoft—Ancillary Function Driver (afd.sys)

afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application.

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2011-2005

Vulnerability Overview

Severity: High
CISA KEV: Yes
Ransomware: Unknown
Published: Mar 28, 2022
KEV Added: Mar 28, 2022
Due Date: Apr 18, 2022
Related Articles: 0

Vendor

Microsoft

Ancillary Function Driver (afd.sys)