BestHub
Sign in
Tagged articles

HTTP.sys

3 articles · Page 1 of 1
Black & White Path
Black & White Path
Jul 13, 2026 · Information Security

Deep Dive into CVE‑2026‑47291: Windows HTTP.sys RCE and Public PoC

Security researcher Omair released a PoC for CVE‑2026‑47291, a critical integer‑overflow flaw in Windows HTTP.sys that enables unauthenticated remote code execution with SYSTEM privileges across a fourteen‑year span of Windows client and server versions, prompting urgent patching and mitigation guidance.

CVE-2026-47291HTTP.sysPoC
0 likes · 10 min read
Deep Dive into CVE‑2026‑47291: Windows HTTP.sys RCE and Public PoC
21CTO
21CTO
Oct 20, 2025 · Backend Development

Why the Latest Windows 11 Update Breaks Local Web Servers and How to Fix It

A recent Windows 11 October update (KB5066835) disables local web server functionality by breaking HTTP.sys, causing ASP.NET developers to lose localhost access, with workarounds like uninstalling the patch or disabling HTTP/2, and highlighting broader migration challenges from Windows 10 to Windows 11.

ASP.NETHTTP.sysKB5066835
0 likes · 4 min read
Why the Latest Windows 11 Update Breaks Local Web Servers and How to Fix It
Liangxu Linux
Liangxu Linux
Oct 27, 2021 · Information Security

How an Integer Overflow in IIS’s Read Function Triggers CVE‑2015‑1635

The article explains how a signed‑to‑unsigned integer overflow in IIS’s Read function bypasses size checks, leading to a zero‑length read that triggers the CVE‑2015‑1635 vulnerability in HTTP.sys, allowing attackers to crash the server with crafted Range requests.

CVE-2015-1635Denial of ServiceHTTP.sys
0 likes · 6 min read
How an Integer Overflow in IIS’s Read Function Triggers CVE‑2015‑1635