Description
Microsoft Windows HTTP.sys 中存在拒绝服务漏洞，该漏洞是由于对特定数据验证不充分，可能导致系统进入无限循环状态引起的。
Microsoft Windows HTTP.sys 拒绝服务漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://learn.microsoft.com/zh-cn/security-updates/securitybulletins/2013/ms13-039
https://www.hkcert.org/tc/security-bulletin/microsoft-windows-httpsys-denial-of-service-vulnerability
https://support.microsoft.com/en-gb/topic/ms15-034-vulnerability-in-http-sys-could-allow-remote-code-execution-april-14-2015-e8755c1e-c5a8-fa75-c7b1-32087b127850
https://nvd.nist.gov/vuln/detail/cve-2015-1635
https://isc.sans.edu/diary/19583
https://www.nsfocus.net/vulndb/143865
https://www.sbr-info.com/fuwu/ld/639.html
https://www.secrss.com/articles/54184
https://www.sentinelone.com/vulnerability-database/cve-2026-33096/
https://windowsforum.com/threads/cve-2026-49160-http-sys-dos-patch-tuesday-urgency-for-windows-web-stack.424687/
https://www.rapid7.com/db/vulnerabilities/msft-cve-2023-32084/