An out-of-bounds read flaw exists in the Windows HTTP.sys driver, a foundational networking component used by web servers and internal networking roles. An unauthenticated remote attacker can trigger a Denial of Service (DoS) condition by sending specially crafted network packets, which causes the targeted system to crash or become unstable. This issue occurs during kernel-mode HTTP processing.