CVE

CVE-2021-31166

Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability

Microsoft · HTTP Protocol Stack

Date added (CISA)

2022-04-06

Remediation due

2022-04-27

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution.