Firetruck

CVE-2021-31166

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Windows 10 Version 2004Microsoft / Windows 10 Version 2004>= 10.0.0, < 10.0.19041.982affected
Windows 10 Version 20H2Microsoft / Windows 10 Version 20H2>= 10.0.0, < 10.0.19042.982affected
Windows Server version 2004Microsoft / Windows Server version 2004>= 10.0.0, < 10.0.19041.982affected
Windows Server version 20H2Microsoft / Windows Server version 20H2>= 10.0.0, < 10.0.19042.982affected