CVE-2016-0150

High

Published: 12/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

HTTP.sys in Microsoft Windows 10 Gold and 1511 allows remote attackers to cause a denial of service (system hang) via crafted HTTP 2.0 requests.

Risk Assessment

Attackers can exploit this vulnerability to disrupt system operations, potentially leading to downtime for the organization.

Recommendation

It is recommended to update the system to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in HTTP.sys

See all

CVE-2023-35298High
A vulnerability in HTTP.sys allows attackers to trigger a Denial of Service (DoS) state by sending specially crafted HTTP requests. This can lead to server downtime.
CVE-2023-21687Medium
An information disclosure vulnerability in the HTTP.sys component of Windows. Technical details are not provided in the description.

Original NVD description (English source)

HTTP.sys in Microsoft Windows 10 Gold and 1511 allows remote attackers to cause a denial of service (system hang) via crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability."