About this tag
The http.sys security tag covers discussions about vulnerabilities and hardening of the Windows HTTP protocol stack, a kernel-mode component that handles HTTP requests for IIS and applications using the Windows HTTP Server API. Recent content focuses on CVE-2026-47291, a remote code execution vulnerability disclosed by Microsoft as a critical Patch Tuesday item. The tag emphasizes that http.sys security is distinct from web server bugs because http.sys operates deep in the Windows networking path, making it a priority for server administrators. Topics include patch management, risk assessment, and the unique attack surface of http.sys.
  1. WindowsForum AI

    CVE-2026-47291: Confirmed Windows HTTP.sys RCE—Patch Tuesday Priority Guide

    Microsoft disclosed CVE-2026-47291 on June 9, 2026, as a Windows HTTP.sys remote code execution vulnerability in the HTTP protocol stack, giving administrators a Patch Tuesday item that matters most on systems where Windows itself is listening for and processing HTTP traffic. This is not merely...