⚠ Actively exploited
Added to CISA KEV on 2025-02-11. Federal agencies required to patch by 2025-03-04. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable..

CVE-2025-21418 — Heap-based Buffer Overflow in Microsoft Windows 10 Version 1507

CWE-122 — Heap-based Buffer Overflow16 documents12 sources
Severity
7.8HIGHNVD
EPSS
13.3%
top 5.82%
CISA KEV
KEV
Added 2025-02-11
Due 2025-03-04
Exploit
No known exploits
Affected products
26
Microsoft Windows 10 Version 1507Microsoft Windows 10 Version 1607Microsoft Windows 10 Version 1809+23 more
Timeline
PublishedFeb 11
KEV addedFeb 11
KEV dueMar 4
Latest updateMay 13
CISA Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Description

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages25 packages

▶NVDmicrosoft/windows< 10.0.14393.7785+5
▶NVDmicrosoft/windows_10_1607< 10.0.10240.20915
▶NVDmicrosoft/windows_10_1809< 10.0.17763.6893
▶NVDmicrosoft/windows_10_21h2< 10.0.19044.5487
▶NVDmicrosoft/windows_10_22h2< 10.0.19045.5487

Patches

Patch: msrc.microsoft.com ↗

🔴Vulnerability Details

3
CVEList
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability↗2025-02-11
▶
GHSA
GHSA-5fhq-7w32-vhww: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability↗2025-02-11
▶
VulnCheck
Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability↗2025
▶

📋Vendor Advisories

2
Microsoft
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability↗2025-02-11
▶
CISA
Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability↗2025-02-11
▶

🕵️Threat Intelligence

10
Tenable
Microsoft’s May 2025 Patch Tuesday Addresses 71 CVEs (CVE-2025-32701, CVE-2025-32706, CVE-2025-30400)↗2025-05-13
▶
Krebs
Microsoft Patch Tuesday, February 2025 Edition↗2025-02-12
▶
Krebs
Microsoft Patch Tuesday, February 2025 Edition↗2025-02-12
▶
Talos
Microsoft Patch Tuesday for February 2025 — Snort rules and prominent vulnerabilities↗2025-02-11
▶
Talos
Microsoft Patch Tuesday for February 2025 — Snort rules and prominent vulnerabilities↗2025-02-11
▶
CVE-2025-21418 — Heap-based Buffer Overflow | cvebase