CVE-2026-70247 in Windows

Resumen

por MITRE • 2026-10-13

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: Microsoft
• Reservar: 2026-08-04
• Divulgación: 2026-10-13
• Moderación: aceptado
• Artículo: VDB-418933
• CPE: 20261013
• CWE: CWE-125 (confirmado)
• CVSS: 7.8 (CNA)
• EPSS: 0.00000
• KEV: no
• Actividades: muy bajo
• Sector: Agriculture, Hostingprovider, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-70247
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-70247
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-70247/