CVE-2026-47291: Integer Overflow Remote Code Execution in Windows HTTP.sys

Original text: “CVE-2026-47291: Remote Code Execution in the Windows HTTP.sys” — Yazhi Wang and Jonathan Lein, TrendAI Zero Day Initiative (July 10, 2026). Code blocks are reproduced verbatim from the original with attribution captions.

Executive Summary

CVE-2026-47291 is a critical remote code execution vulnerability in HTTP.sys, the kernel-mode HTTP protocol driver that underpins Internet Information…

https://core-jmp.org/2026/07/cve-2026-47291-rce-windows-http-sys/