CVE-2026-70247

Name of the Vulnerable Software and Affected Versions Windows HTTP.sys (affected versions not specified)

Description An out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute arbitrary code locally and remotely, which can affect the system. An out-of-bounds read occurs when the software reads data past the end of the intended buffer, potentially accessing restricted memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.