Aug 2026: Windows HTTP.sys Elevation of Privilege Vulnerability
CVE-2026-62741 Published on August 11, 2026
Windows HTTP.sys Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
Weakness Types
What is an Integer underflow Vulnerability?
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result. This can happen in signed and unsigned cases.
CVE-2026-62741 has been classified to as an Integer underflow vulnerability or weakness.
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
Products Associated with CVE-2026-62741
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
Affected Versions
Microsoft Windows 10 Version 1607:- Version 10.0.14393.0 and below 10.0.14393.9418 is affected.
- Version 10.0.17763.0 and below 10.0.17763.9115 is affected.
- Version 10.0.19044.0 and below 10.0.19044.7663 is affected.
- Version 10.0.19045.0 and below 10.0.19045.7663 is affected.
- Version 10.0.22631.0 and below 10.0.22631.7517 is affected.
- Version 10.0.22631.0 and below 10.0.22631.7517 is affected.
- Version 10.0.26100.0 and below 10.0.26100.9168 is affected.
- Version 10.0.26200.0 and below 10.0.26200.9168 is affected.
- Version 10.0.28000.0 and below 10.0.28000.2704 is affected.
- Version 6.2.9200.0 and below 6.2.9200.26279 is affected.
- Version 6.2.9200.0 and below 6.2.9200.26279 is affected.
- Version 6.3.9600.0 and below 6.3.9600.23337 is affected.
- Version 6.3.9600.0 and below 6.3.9600.23337 is affected.
- Version 10.0.14393.0 and below 10.0.14393.9418 is affected.
- Version 10.0.14393.0 and below 10.0.14393.9418 is affected.
- Version 10.0.17763.0 and below 10.0.17763.9115 is affected.
- Version 10.0.17763.0 and below 10.0.17763.9115 is affected.
- Version 10.0.20348.0 and below 10.0.20348.5499 is affected.
- Version 10.0.26100.0 and below 10.0.26100.33296 is affected.
- Version 10.0.26100.0 and below 10.0.26100.33296 is affected.