CVE Catalog

CVE-2026-62753

HighCVSS 7.0
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.20%

10th percentile - higher than 10% of all known CVEs

Summary

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker could exploit this vulnerability to gain administrator privileges and take control of the system, potentially leading to severe security breaches.

Recommendation

Apply the latest Windows security updates to fix this vulnerability.

Original NVD description (English source)

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS