CVE-2026-62811

A heap-based buffer overflow vulnerability in Windows HTTP.sys enables authorized attackers to escalate their privileges locally, potentially allowing them to execute arbitrary code with elevated permissions. Organizations using affected Windows systems should prioritize patching this vulnerability to mitigate the risk of unauthorized access and control over their environments. This is particularly critical for systems exposed to untrusted networks or users.