CVE-2023-21768

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock (affected versions not specified)

Description An elevation of privilege issue exists in the Windows Ancillary Function Driver for WinSock (afd.sys), which implements the kernel-side of WinSock. The flaw is caused by insufficient validation of a user-supplied pointer in an IOCTL (Input/Output Control) path, where IOCTLs are used to communicate between user-mode applications and kernel-mode drivers. This allows an attacker to create an arbitrary kernel write primitive and elevate their privileges to NT AUTHORITYSYSTEM.