http.sys dos

Microsoft disclosed CVE-2026-49160 on June 9, 2026, as a Windows HTTP.sys denial-of-service vulnerability addressed in the June Patch Tuesday updates, with public disclosure already recorded but no confirmed active exploitation at release time. The bug matters less because it promises dramatic...