Ancillary Function Driver (AFD) For Winsock Privilege Escalation Exploit

A vulnerability exists in the Windows Ancillary Function Driver for Winsock afd.sys can be leveraged by an attacker to escalate privileges to those of NT AUTHORITY\SYSTEM. Due to a flaw in AfdNotifyRemoveIoCompletion, it is possible to create an arbitrary kernel Write-Where primitive, which can b...

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2023-21768 Local Privilege Escalation POC authors: chomp...

CVE-2023-21768

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...

CVE-2023-21768

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...

Privilege escalation

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2023-21768 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2023-21768

CVE-2023-21768 affects the Windows Ancillary Function Driver for WinSock (afd.sys). The vulnerability stems from a flaw in AfdNotifyRemoveIoCompletion, enabling a local privilege escalation to SYSTEM by manipulating I/O ring structures. Documented impact shows LPE on Windows 11 22H2 up to build 2...

Microsoft Windows Ancillary Function Driver for WinSock 安全漏洞

Microsoft Windows Ancillary Function Driver for WinSock is a helper function driver for Winsock from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Ancillary Function Driver for WinSock. An attacker can exploit the vulnerability to elevate privileges...

Ancillary Function Driver (AFD) for WinSock Elevation of Privilege

A vulnerability exists in the Windows Ancillary Function Driver for Winsock afd.sys can be leveraged by an attacker to escalate privileges to those of NT AUTHORITY\SYSTEM. Due to a flaw in AfdNotifyRemoveIoCompletion, it is possible to create an arbitrary kernel Write-Where primitive, which can b...

CVE-2022-30151

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...

CVE-2022-30151

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...

CVE-2022-30151 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2022-30151

CVE-2022-30151 is described as a Windows Elevation of Privilege vulnerability in the Ancillary Function Driver for WinSock; no additional technical details are provided in the connected documents.

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

The vulnerability of the Windows Ancillary Function Driver for WinSock in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Windows Ancillary Function Driver for WinSock in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

PT-2022-3131 · Microsoft · Windows Ancillary Function Driver For Winsock +1

Name of the Vulnerable Software and Affected Versions: Windows Ancillary Function Driver for WinSock affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows Ancillary Function Driver for WinSock, which can allow an...

CVE-2022-24494

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...

CVE-2022-24494

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...

Privilege escalation

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...