CVE-2023-21768

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock (affected versions not specified)

Description An elevation of privilege issue exists in the Windows Ancillary Function Driver for WinSock (afd.sys), which implements the kernel-side of WinSock. The flaw is caused by insufficient validation of a user-supplied pointer in an IOCTL (Input/Output Control) path. An IOCTL is a system call used by applications to communicate with device drivers. This lack of validation allows an attacker to create an arbitrary kernel write primitive, enabling them to elevate their privileges to NT AUTHORITYSYSTEM.