CVE-2025-21418

HIGH(7.8)KEV

Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

Description

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

KEV Information

Vendor
Microsoft
Product
Windows
Date Added
February 11, 2025
Due Date
March 4, 2025
Required Action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVSS Score

Vector String
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HOpen in Calculator
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.9

CWEs

CWE-122Heap Buffer Overflow

Heap-based Buffer Overflow

Affected Products

VendorProductVersion
microsoftwindows 10 1607< 10.0.10240.20915
microsoftwindows 10 1809< 10.0.17763.6893
microsoftwindows 10 21h2< 10.0.19044.5487
microsoftwindows 10 22h2< 10.0.19045.5487
microsoftwindows 11 22h2< 10.0.22621.4890
microsoftwindows 11 23h2< 10.0.22631.4890
microsoftwindows 11 24h2< 10.0.26100.3107
microsoftwindows server 2008-; r2
microsoftwindows server 2012-; r2
microsoftwindows server 2016< 10.0.14393.7785
microsoftwindows server 2019< 10.0.17763.6893
microsoftwindows server 2022< 10.0.20348.3148
microsoftwindows server 2022 23h2< 10.0.25398.1425
microsoftwindows server 2025< 10.0.26100.3107

References

CVSS Score

7.8
HIGH(7.8)

EPSS Score

EPSS Score1.54%
EPSS Percentile72.1%

Dates

PublishedFebruary 11, 2025
Last ModifiedJune 17, 2026
StatusAnalyzed
CVSS Versionv3.1

Quick Links

Back to CVE Database

Need Help With Vulnerability Management?

Our security experts can help you prioritize and remediate vulnerabilities effectively.

Get in Touch