CVE Catalog
CVE-2026-61937
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.31%
24th percentile - higher than 24% of all known CVEs
Summary
Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could gain elevated privileges, potentially leading to full system compromise.
Recommendation
Apply the latest Windows security updates.
Original NVD description (English source)
Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.