PT-2026-58399 · Microsoft · Http.Sys+1

CVE-2026-50420 · Published 2026-07-14 · Updated 2026-07-14

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows HTTP.sys (affected versions not specified)

Description An out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs when the software reads data past the end of the intended buffer, potentially accessing memory that should be restricted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-09814

CVE-2026-50420

Affected Products

Http.Sys

Windows

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-50420 · Security Note
• https://bdu.fstec.ru/vul/2026-09814 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-50420 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50420 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50420 · Vendor Advisory