CVE-2011-2005

HIGH

7.8

CVSS Score

Published: October 12, 2011 at 01:00 AM UTC

Updated: June 16, 2026 at 11:30 PM UTC

2 products affected across 1 vendorWindows XpWindows Server 2003

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploitation

CISA KEV

Exploit prediction

EPSS 32%

SSVC

Active

Actively Exploited

CISA Known Exploited Vulnerabilities (KEV) Catalog

EPSS Score31.8%

EPSS (Exploit Prediction Scoring System) estimates a 31.8% chance this CVE is exploited in the wild within the next 30 days — higher than 98% of all CVEs. It complements CVSS: a high EPSS on a mid-severity CVE can still be urgent.

afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application.

Required Action

Apply updates per vendor instructions.

Ransomware Use

Unknown

Added to KEV

Mar 28, 2022

Remediation Due

Apr 18, 2022

1653 days overdue

Notes

https://nvd.nist.gov/vuln/detail/CVE-2011-2005

Description

afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."