Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2026-21250: Windows HTTP.sys Local Privilege Escalation W...

PT-2026-32871

Name of the Vulnerable Software and Affected Versions Windows HTTP.sys affected versions not specified Description An out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the moment, there is no information about a...

CVE-2026-21232

Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-21250

Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-21250

Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-21250

Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-21232

Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-21232

Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-21232

Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-21240 Windows HTTP.sys Elevation of Privilege Vulnerability

...

CVE-2026-21250

Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

Windows HTTP.sys Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

PT-2026-7344

Time-of-check time-of-use toctou race condition in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

PT-2026-7337

Name of the Vulnerable Software and Affected Versions Windows HTTP.sys affected versions not specified Description An issue exists in Windows HTTP.sys where an untrusted pointer dereference can allow a locally authenticated attacker to gain elevated privileges. The issue allows attackers to affec...

CVE-2026-20929

Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network...

CVE-2026-20929

CVE-2026-20929 concerns Windows HTTP.sys. The vulnerability is described as improper access control that could allow an authorized attacker to elevate privileges over the network. The connected documents corroborate Windows HTTP.sys involvement and list CVSS about 7.5–7.5+ with impact: obtaining ...

CVE-2026-20929

Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network...

CVE-2025-27473

Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network...

CVE-2025-27473

Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network...

CVE-2025-27473

Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network...