CVE-2026-70247

Summary

by MITRE • 10/13/2026

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Disclosure: 10/13/2026
• Moderation: in review
• CPE: 20261013
• CWE: CWE-125 (unconfirmed)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-70247
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-70247
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-70247/