CVE-2011-2005Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability

afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."

7.8 HIGHEPSS 31.76%⚡ Known Exploited (CISA KEV)NVD: Published

Last updated: 2025-10-22 00:05 UTC

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
7.8	HIGH	3.1CISA-ADP	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CVE ID: CVE-2011-2005
Status: Published
Assigner (CNA): microsoft
Published: Oct 12, 2011
Last modified: 2025-10-22 00:05 UTC
Weaknesses: CWE-264

Sources

NVD (unavailable at last refresh)
CVE.org
CISA KEV
FIRST EPSS

Refreshed hourly from the sources above. Last fetched 2026-11-07 13:38 UTC.