> CVE-2026-21250 Windows HTTP.sys Elevation of Privilege Vulnerability

[SOURCE] Microsoft Security Update Guide [DATE: 10/02/2026 08:00] [LANGUAGE: EN]

Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.