SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2011-2005

HIGH · CVSS 7.8 EPSS 31.76% CISA KEV · Actively Exploited

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2011-10-12 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.8. It affects Microsoft, Windows. It is listed in CISA's Known Exploited Vulnerabilities catalog, indicating confirmed active exploitation in the wild. Its EPSS score suggests a 31.8% probability of exploitation in the next 30 days.

CISA KEV Details

Status: This CVE is listed in CISA's Known Exploited Vulnerabilities catalog.

Ransomware use: Unknown

Added to KEV: 2022-03-28

Required action: Apply updates per vendor instructions.

CVE
CVE-2011-2005
Severity
HIGH
CVSS
7.8
EPSS
31.76%
Microsoft Windows

Original NVD Description

afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."