⚡ Exploit-DB.ai CRITICAL
CRITICAL

CVE-2022-21907

Published: March 18, 2026 · Source: National Vulnerability Database (NVD)

⚡ AI Threat Assessment

Windows HTTP.sys RCE — wormable unauthenticated vulnerability in HTTP Protocol Stack. Disable HTTP Trailer Support on Windows 10 1809/Server 2019, or apply January 2022 patches for all affected versions.

📋 Official Description

HTTP Protocol Stack Remote Code Execution Vulnerability in Windows HTTP.sys allowing unauthenticated attackers to execute code via crafted HTTP requests.

Get Real-Time CVE Alerts

Supernova subscribers receive AI-triaged CVE alerts the moment they're published — before the PoC drops.

Start Supernova — $99/mo →