http.sys denial of service

Microsoft’s handling of CVE-2026-33096 is a useful reminder that the most important part of a vulnerability record is not always the headline label, but the confidence signal behind it. The CVE is described as an HTTP.sys denial-of-service vulnerability, and the surrounding advisory language...