Skip to content
Threat Feed
Subscribe

Product

Windows Server 20H2 (< 10.0.19042.982)

1 brief RSS
high advisory

Microsoft Windows: http.sys use-after-free remote code execution (CVE-2021-31166)

A public proof-of-concept exploit for CVE-2021-31166, a use-after-free vulnerability in the Windows http.sys driver, demonstrates remote code execution via a malformed Accept-Encoding header.

Windows 10 2004 +3 windows rce vulnerability http-protocol-stack
1r 1t 1c