CVE-2013-3887: The Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Wind...

Security readout for executives and security teams

This is a Windows kernel information-disclosure flaw. A local user on affected Windows versions could obtain sensitive data from kernel memory through the Ancillary Function Driver. It is not shown as CISA KEV in the provided bundle, so active exploitation is not evidenced here. Exposure is most likely on legacy Windows systems listed in the CVE: XP SP2, Server 2003 SP2, Vista SP2, Server 2008 variants, Windows 7 SP1, Windows 8, and Server 2012. Internet exposure is not the key factor because the described attacker is local. Treat as a legacy Windows risk requiring patch verification and retirement planning. It is not a top emergency from the supplied evidence, but affected unpatched systems with local user access should be addressed promptly. Mitigation focus: Apply Microsoft guidance and security updates associated with MS13-093.; Inventory and retire unsupported affected Windows versions where feasible.; Prioritize systems allowing interactive, shared, or untrusted local user access..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.