CVE-2026-83705CWE-497
CVE-2026-83705
Medium · published October 13, 2026
What it is
Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.
The record
Technical detail
- CVSS v3.1
- 5.5 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00471 · 39.8th percentile
- Weakness
- CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
- Published
- 2026-10-13T23:20Z
References (1)
EPSS history
Timeline