CVE-2026-61937

A vulnerability in the Windows HTTP.sys component allows authorized attackers to exploit an integer overflow or wraparound, potentially leading to local privilege escalation. This could enable attackers to gain elevated access to system resources and execute arbitrary code with higher privileges. Organizations using affected Windows systems should prioritize patching this vulnerability to mitigate the risk of unauthorized access and system compromise.