CVE-2026-47291
CRITICALMicrosoft Windows HTTP.sys - Remote Code Execution via Integer Overflow
Title source: manualExploitation Summary
EIP tracks 2 public exploits for CVE-2026-47291. PoCs published by dhmosfunk, ManagerEmpty.
AI-analyzed exploit summary The repository contains a functional Python script that exploits CVE-2026-47291, a denial-of-service vulnerability in HTTP.sys. The script sends a large number of HTTP/2 headers to trigger an integer overflow in the HTTP.sys driver, leading to a system crash or instability.
Description
Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.
Exploits (2)
The repository contains a functional Python script that exploits CVE-2026-47291, a denial-of-service vulnerability in HTTP.sys. The script sends a large number of HTTP/2 headers to trigger an integer overflow in the HTTP.sys driver, leading to a system crash or instability.
The repository claims to provide an RCE exploit for CVE-2026-47291 targeting Windows HTTP.sys but lacks actual exploit code, instead redirecting to an external download link via a URL shortener. The README contains technical details but no functional code, which is a common tactic for malicious or monetized exploit lures.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H