High7.5Microsoft Server PoC reported
HTTP.sys Denial of Service Vulnerability
CVE-2026-49160 Published Jun 9, 2026
Affected products & platforms
Microsoft ServerWindows Server
Summary
HTTP.sys Denial of Service Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016.
Fixed versions
- KB5094123 (build 10.0.17763.8880)
- KB5094127 (build 10.0.19045.7417)
- KB5094128 (build 10.0.20348.5256)
- KB5094125 (build 10.0.26100.32995)
- KB5094126 (build 10.0.26100.8655)
- KB5093998 (build 10.0.22631.7219)
- KB5095051 (build 10.0.28000.2269)
- KB5094122 (build 10.0.14393.9234)
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Mitigation checklist
Recommended fix / mitigation
- Install the applicable security update for your platform: KB5094123, KB5094127, KB5094128, KB5094125, KB5094126, KB5093998 (see the Microsoft Update Catalog).
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.