CVE-2026-70208

LOWCVSS 5.5 · MEDIUM

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-125

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post
  • VulniPulse@vulnipulse

    CVE advisory: CVE-2026-70208 - microsoft: HTTP.sys Information Disclosure Vulnerability. https://vulnipulse.com/advisories/microsoft-cve-2026-70208 #CVE #CyberSecurity #Microsoft #WindowsServer

    1000025
    30 followersView on X

Explore more