CVE Catalog
CVE-2026-47291
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk21.51%
97th percentile - higher than 97% of all known CVEs
Summary
An integer overflow or wraparound vulnerability in Windows HTTP.sys allows an unauthorized attacker to execute code remotely over a network.
Risk Assessment
An attacker can remotely execute arbitrary code on a vulnerable Windows system, potentially leading to full server compromise.
Recommendation
Install the latest Windows security updates from Microsoft.
Original NVD description (English source)
Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.