Exploit / PoCcritical
PoC released for wormable Windows IIS bug
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-31166 | Use-After-Free RCE in Microsoft Windows HTTP Protocol Stack (http.sys) | 9.8 | 100% | KEV | KEV |
From the original article
2 min read at therecord.media
A security researcher has published over the weekend proof-of-concept exploit code for a wormable Windows IIS server vulnerability. Tracked as CVE-2021-31166 , the vulnerability was discovered internally by Microsoft's staff and patched last week in the May 2021 Patch Tuesday.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.