CVE-2026-47291: Remote Code Execution in the Windows HTTP.sys
MentionsMicrosoftMicrosoft Windows
In this excerpt of a TrendAI Research Services vulnerability report, Yazhi Wang and Jonathan Lein of the TrendAI Research team detail a recently patched remote code execution bug in the Windows HTTP protocol stack. Successful exploitation of this vulnerability can result in a denial-of-service condition, or, in the worst case, code execution with kernel privileges.
Summary from Zero Day Initiative.
Explained
The technology and terms in this story. Learn more
- AttackRemote code execution · RCEA flaw that lets an attacker run their own code on someone else's machine over the network.
- AttackDDoS · Distributed denial of serviceFlooding a service with traffic from many machines until it can't respond.
- ConceptCVE · Common Vulnerabilities and ExposuresThe public ID system for vulnerabilities, such as CVE-2026-12345, so everyone means the same bug.
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.
Vulnerabilities in this story
Severity and exploitation facts from NVD, FIRST, and CISA.