#HTTPsys - Twitter Hashtag

about 15 hours ago

A crafted HTTP request can crash straight into the Windows kernel - HTTP.sys RCE, no login needed, PoC is public. https://t.co/YIp1OQRWMA #ThreatIntel #CVE_2026_47291 #HTTPsys #IntegerOverflow

threadlinqs's tweet photo. A crafted HTTP request can crash straight into the Windows kernel - HTTP.sys RCE, no login needed, PoC is public. https://t.co/YIp1OQRWMA #ThreatIntel #CVE_2026_47291 #HTTPsys #IntegerOverflow https://t.co/ub47U9R22L

0

33

ThreatWire @ThreatWire_

4 days ago

🚨 CVE-2026-47291: @trendaisecurity researchers disclosed a Windows HTTP.sys kernel buffer overflow that could allow unauthenticated remote code execution over HTTPS under specific conditions. #CyberSecurity #CVE #Windows #HTTPsys #ThreatWire

0

1

0

61

Windows Forum

@windowsforum

5 days ago

🪟 Windows HTTP.sys was leaking memory through an out-of-bounds read. July’s fix closes the hole—another reminder that “Important” vulnerabilities still deserve “patch now” energy. https://t.co/ey47UWI5jA #WindowsSecurity #HttpSys #PatchTuesday #Cve202650420

windowsforum's tweet photo. 🪟 Windows HTTP.sys was leaking memory through an out-of-bounds read. July’s fix closes the hole—another reminder that “Important” vulnerabilities still deserve “patch now” energy.
https://t.co/ey47UWI5jA
#WindowsSecurity #HttpSys #PatchTuesday #Cve202650420 https://t.co/w5gvAU3TBQ

0

13

Windows Forum

@windowsforum

5 days ago

🪟 HTTP.sys can be remotely pushed into resource exhaustion with no login required. KB5101650 is less “optional update” and more “please stop strangers from DoS-ing your Windows box.” https://t.co/RXSMEgW3xE #WindowsSecurity #PatchManagement #HttpSys #Cve202649787

windowsforum's tweet photo. 🪟 HTTP.sys can be remotely pushed into resource exhaustion with no login required. KB5101650 is less “optional update” and more “please stop strangers from DoS-ing your Windows box.”
https://t.co/RXSMEgW3xE
#WindowsSecurity #PatchManagement #HttpSys #Cve202649787 https://t.co/phIzHF9IPK

0

106

SANS.edu Internet Storm Center

@sans_isc

over 4 years ago

Sorry, but my initial assessment of CVE-2022-21907 was wrong. The #trailer features is enabled by default in most versions of Windows. This is a BIG DEAL. PATCH NOW! #cve202221907 #httpsys

3

90

40

6

0