CVE-2026-62750: Windows HTTP Protocol Stack Tampering Vulnerability
Published Aug 11, 2026
·Updated
Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network.
Other sources
Windows HTTP Protocol Stack Tampering Vulnerability
— Microsoft
Affected Software
54 affected componentsFixes available
Microsoft Windows Server 2016<10.0.14393.9418
10.0.14393.9418
Microsoft Windows Server 2016<10.0.14393.9418
10.0.14393.9418
Microsoft Windows 11=26H1
10.0.28000.2704
Microsoft Windows 10=1607
10.0.14393.9418
Microsoft Windows Server 2025<10.0.26100.33296, <10.0.26100.33222
10.0.26100.3329610.0.26100.33222
Microsoft Windows 10=1607
10.0.14393.9418
Microsoft Windows 11=23H2
10.0.22631.7517
Microsoft Windows 11=26H1
10.0.28000.2704
Microsoft Windows 11=23H2
10.0.22631.7517
Microsoft Windows 10=22H2
10.0.19045.7663
Microsoft Windows 10=22H2
10.0.19045.7663
Microsoft Windows 10=22H2
10.0.19045.7663
Microsoft Windows 10=21H2
10.0.19044.7663
Microsoft Windows Server 2025<10.0.26100.33296, <10.0.26100.33222
10.0.26100.3329610.0.26100.33222
Microsoft Windows 10=21H2
10.0.19044.7663
Microsoft Windows Server 2019<10.0.17763.9115
10.0.17763.9115
Microsoft Windows Server 2022<10.0.20348.5499, <10.0.20348.5440
10.0.20348.549910.0.20348.5440
Microsoft Windows 10=21H2
10.0.19044.7663
Microsoft Windows Server 2022<10.0.20348.5499, <10.0.20348.5440
10.0.20348.549910.0.20348.5440
Microsoft Windows 10=1809
10.0.17763.9115
Microsoft Windows 10=1809
10.0.17763.9115
Microsoft Windows Server 2019<10.0.17763.9115
10.0.17763.9115
Microsoft Windows Server 2012 R2<6.3.9600.23338
6.3.9600.23338
Microsoft Windows Server 2012<6.2.9200.26280
6.2.9200.26280
Microsoft Windows Server 2012 R2<6.3.9600.23338
6.3.9600.23338
Microsoft Windows Server 2012<6.2.9200.26280
6.2.9200.26280
Microsoft Windows 11=24H2
10.0.26100.916810.0.26200.9106
Microsoft Windows 11=25H2
10.0.26200.916810.0.26200.9106
Microsoft Windows 11=25H2
10.0.26200.916810.0.26200.9106
Microsoft Windows 11=24H2
10.0.26100.916810.0.26100.9106
Microsoft Windows 10 1607<10.0.14393.9418
Microsoft Windows 10 1607<10.0.14393.9418
Microsoft Windows 10 1809<10.0.17763.9115
Microsoft Windows 10 1809<10.0.17763.9115
Microsoft Windows 10 21h2<10.0.19044.7663
Microsoft Windows 10 21h2<10.0.19044.7663
Microsoft Windows 10 21h2<10.0.19044.7663
Microsoft Windows 10 22h2<10.0.19045.7663
Microsoft Windows 10 22h2<10.0.19045.7663
Microsoft Windows 10 22h2<10.0.19045.7663
Microsoft Windows 11 23h2<10.0.22631.7517
Microsoft Windows 11 23h2<10.0.22631.7517
Microsoft Windows 11 24h2<10.0.26100.9106
Microsoft Windows 11 24h2<10.0.26100.9106
Microsoft Windows 11 25h2<10.0.26200.9106
Microsoft Windows 11 25h2<10.0.26200.9106
Microsoft Windows 11 26h1<10.0.28000.2704
Microsoft Windows 11 26h1<10.0.28000.2704
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016<10.0.14393.9418
Microsoft Windows Server 2019<10.0.17763.9115
Microsoft Windows Server 2022<10.0.20348.5440
Microsoft Windows Server 2025<10.0.26100.33222
Remediation
Event History
Aug 11, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·05:04 PM
Data Sourced
via MITRE·05:04 PM
DescriptionSeverity
Data Sourced
via NVD·05:18 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-62750?
CVE-2026-62750 has a medium severity rating of 6.5.
2
How do I fix CVE-2026-62750?
To fix CVE-2026-62750, apply the available patch provided by Microsoft.
3
What software is affected by CVE-2026-62750?
CVE-2026-62750 affects Microsoft Windows 10, Windows 11, and various versions of Windows Server.
4
What risk does CVE-2026-62750 pose?
CVE-2026-62750 poses a risk of unauthorized tampering over an adjacent network.
5
Can CVE-2026-62750 lead to data integrity issues?
Yes, CVE-2026-62750 can potentially lead to data integrity issues due to unauthorized alterations.