CVE-2025-21418βMicrosoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
PUBLISHEDvulnerability record
2025-02-11 Β· last modified June 21, 2025
Metadata
Vulnerability Name
Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
Description
Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.
Known To Be Used in Ransomware Campaigns?
Action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.