CVE Catalog

CVE-2026-62739

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.24%

15th percentile - higher than 15% of all known CVEs

Summary

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker could exploit the buffer overflow to execute code with elevated privileges, risking full system compromise.

Recommendation

Apply the latest security patches for Windows.

Original NVD description (English source)

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS