CVE-2026-47291

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

0.2%

Riskier than 40% of all CVEs

Exploitation

Not in CISA KEV

No federal exploitation record

Remediation

Patch available

Vendor fix published

2 articles across 2 outlets · first covered Jun 9, 2026 · latest Jun 9, 2026

Tracked incidents