CVE-2026-47291: HTTP.sys Remote Code Execution Vulnerability

Severity: Critical

CVSS Score: 9.8

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.