CVE-2025-21418: high-severity vulnerability in Microsoft Windows 10 Version 1507
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
A flaw in Windows' networking driver allows a local attacker to gain higher system privileges. An authenticated user can exploit this vulnerability to run malicious code with administrator rights.
CWE-122 (heap-based buffer overflow) in the Windows Ancillary Function Driver for WinSock enables local privilege escalation. The vulnerability requires an authenticated local attacker to trigger a buffer overflow condition, resulting in arbitrary code execution with SYSTEM privileges.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.