CVE Catalog
CVE-2026-62735
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.38%
31th percentile - higher than 31% of all known CVEs
Summary
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
Risk Assessment
Similar to other HTTP.sys vulnerabilities, it could lead to privilege escalation and full system compromise.
Recommendation
Apply Windows security updates to mitigate the risk.
Original NVD description (English source)
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.