CVE-2018-0956

HIGH 7.5CVE-2018-0956 · Published 12/04/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

References

securityfocus.com/bid/103650 · Third Party Advisory
securitytracker.com/id/1040661 · Third Party Advisory
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0956 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free