---
id: "CVE-2026-95923"
page: "https://infrastack.ai/live/CVE-2026-95923"
kind: "vulnerability"
aliases: ["CVE-2026-95923"]
title: "Windows HTTP.sys: heap overflow lets a local user gain higher privileges"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["http.sys", "iis", "infrastructure", "self-hosted", "windows"]
not_affected_if: ["no-local-users", "patched-windows"]
published_at: "2026-11-10T19:21:45+00:00"
first_seen_at: "2026-11-10T19:25:24+00:00"
updated_at: "2026-11-10T20:25:06+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95923", "first_seen_at": "2026-11-10T19:25:24+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-10T20:25:06+00:00"}]
exploit_sources: []
---

# Windows HTTP.sys: heap overflow lets a local user gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-95923 (this .md is for agents)

A heap-based buffer overflow in the Windows HTTP.sys driver lets an attacker who already has a local account raise their privileges. The sources do not describe a remote trigger or a public exploit.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

unknown: the MSRC entry for CVE-2026-95923 was not readable. Once it is, compare the build number of C:\Windows\System32\drivers\http.sys against the patched build listed there.

## Timeline

- 2026-11-10T19:25:24+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-95923
- 2026-11-10T20:25:06+00:00 analyst — Could not read the MSRC entry (page returned empty) and searches found no other source for this CVE. Affected builds, KB and mitigations are unknown. The HTTP.sys results returned were for other CVEs (e.g. CVE-2026-47291) and were not used. Needs a revisit once MSRC or NVD text loads.

## From the sources

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_