Windows HTTP.sys vulnerabilities
12 known CVE vulnerabilities in Windows HTTP.sys, translated and rated.
- CVE-2026-47291Critical
An integer overflow or wraparound vulnerability in Windows HTTP.sys allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-62811High
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
- CVE-2026-62753High
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
- CVE-2026-62741High
Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
- CVE-2026-62739High
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
- CVE-2026-62735High
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
- CVE-2026-61937High
Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
- CVE-2026-50420Medium
An out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally.
- CVE-2026-49787High
Unrestricted resource allocation vulnerability in Windows HTTP.sys. An unauthorized attacker can remotely cause a denial of service.
- CVE-2026-33096High
Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.
- CVE-2026-20929High
Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.
- CVE-2022-41057High
Vulnerability in Windows HTTP.sys allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.