CVE-2023-35298
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk72th percentile - higher than 72% of all known CVEs
Summary
A vulnerability in HTTP.sys allows attackers to trigger a Denial of Service (DoS) state by sending specially crafted HTTP requests. This can lead to server downtime.
Risk Assessment
Organizations may experience service outages, leading to application unavailability and potential financial losses.
Recommendation
It is recommended to update the system to the latest version to patch this vulnerability and to monitor network traffic for suspicious requests.
Other vulnerabilities in HTTP.sys
See all- CVE-2016-0150High
HTTP.sys in Microsoft Windows 10 Gold and 1511 allows remote attackers to cause a denial of service (system hang) via crafted HTTP 2.0 requests.
- CVE-2023-21687Medium
An information disclosure vulnerability in the HTTP.sys component of Windows. Technical details are not provided in the description.
Original NVD description (English source)
HTTP.sys Denial of Service Vulnerability