Microsoft Windows HTTP.sys Out-of-Bounds Read Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in Windows HTTP.sys, allowing an unauthorized attacker to cause a service disruption over the network. This issue arises from an out-of-bounds read, which can be exploited to manipulate how data is processed, potentially leading to a crash or unresponsiveness of the server.

Impact

Exploitation of this vulnerability causes a denial-of-service condition, where the affected system becomes unresponsive or unavailable, disrupting normal operations.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5082052, KB5083769, KB5082060, KB5082142, and KB5083768.