A double free vulnerability in the Ancillary Function Driver (AFD) in afd.sys allows local users to gain privileges via a crafted application. This vulnerability could allow elevation of privilege, enabling an attacker to execute arbitrary code and take complete control of an affected system. The attacker could then install programs, view, change, or delete data, or create new accounts with full user rights.