CVE-2026-21250 Windows HTTP.sys Elevation of Privilege Vulnerability
| Reporter | Title | Published | Views | Family All 29 |
|---|---|---|---|---|
 | Exploit for Untrusted Pointer Dereference in Microsoft | 4 May 202615:36 | – | githubexploit |
 | CVE-2026-21250 | 10 Feb 202617:51 | – | attackerkb |
 | HTTP.sys Privilege Escalation | 16 Feb 202600:00 | – | bdu_fstec |
 | CVE-2026-21250 | 10 Feb 202617:30 | – | circl |
 | Microsoft HTTP.Sys security vulnerability | 10 Feb 202600:00 | – | cnnvd |
 | CVE-2026-21250 | 10 Feb 202617:51 | – | cve |
 | Windows 11 24H2 - Local Privilege Escalation | 4 May 202600:00 | – | exploitdb |
 | February 10, 2026—KB5075897 (OS Build 25398.2149) | 10 Feb 202616:00 | – | mskb |
| February 10, 2026—KB5075899 (OS Build 26100.32370) | 10 Feb 202616:00 | – | mskb |
| February 10, 2026—Hotpatch KB5075942 (OS Build 26100.32313) | 10 Feb 202616:00 | – | mskb |
10
[
{
"vendor": "Microsoft",
"product": "Windows 11 Version 24H2",
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.7840",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows 11 Version 25H2",
"versions": [
{
"version": "10.0.26200.0",
"lessThan": "10.0.26200.7840",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows 11 version 26H1",
"platforms": [
"ARM64-based Systems"
],
"versions": [
{
"version": "10.0.28000.0",
"lessThan": "10.0.28000.1575",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows 11 Version 26H1",
"versions": [
{
"version": "10.0.28000.0",
"lessThan": "10.0.28000.1575",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.25398.0",
"lessThan": "10.0.25398.2149",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2025",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.32370",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2025 (Server Core installation)",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.32370",
"versionType": "custom",
"status": "affected"
}
]
}
]Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
19 Aug 2026 16:26Current
CVSS 3.17.8
EPSS0.01111
SSVC