CVE-2026-47291: Integer overflow or wraparound in Windows HTTP.sys allows

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.

Related briefings

Browse the CVE database

Read the full analysis on IntelFusions