CVE-2021-31166
Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability
Published May 11, 2021 · updated Jun 16, 2026 · microsoft windows 10 2004
Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution.
Timeline
Detection, updates, and resolution for this record.
May 11, 2021 · Catalog
Detected
Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution.
Apr 6, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Apr 27, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution.
Required action
Apply updates per vendor instructions.
CISA due date Apr 27, 2022
Affected
- cpe microsoft/windows 10 2004version unspecified
- cpe microsoft/windows 10 20h2version unspecified
- cpe microsoft/windows server 2004version unspecified
- cpe microsoft/windows server 20h2version unspecified
- vendor Microsoft HTTP Protocol Stackversion unspecified
Sources
- CISA KEVCVE-2021-31166
Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution.
cisa.gov - CVE.orgCVE-2021-31166
Official CVE identifier
cve.org - FIRST EPSSCVE-2021-31166
30-day exploitation probability 99.9%
first.org - Metasploit Modulesauxiliary_dos/windows/http/http_sys_accept_encoding_dos_cve_2021_31166
Public module reference (normal). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2021-31166
HTTP Protocol Stack Remote Code Execution Vulnerability
nvd.nist.gov - Packet Storm Securityhttp://packetstormsecurity.com/files/162722/Microsoft-HTTP-Protocol-Stack-Remote-Code-Execution.html
Packet Storm link already published on the finding.
packetstormsecurity.com