CVE Catalog
CVE-2026-62811
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.34%
27th percentile - higher than 27% of all known CVEs
Summary
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized attacker could elevate privileges on the system, potentially leading to full system compromise.
Recommendation
Install the latest Windows security updates for the HTTP.sys component.
Original NVD description (English source)
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.