CVE-2026-33096

Меры по смягчению последствий

Mitigation refers to a setting, common configuration, or general best-practice, existing in a default state, that could reduce the severity of exploitation of a vulnerability.

The following mitigating factors might help in your situation:

Caution Follow these steps carefully. Serious problems might occur if you modify the registry incorrectly.

To disable HTTP/3, remove the following registry values from the specified key:

1. Open Registry Editor (regedit.exe).
2. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTP\Parameters.
3. Back up the key: select Parameters, then select File > Export, and save the .reg file to a secure location.
4. If present, delete the EnableHttp3 value.
5. If present, delete the EnableAltSvc value.
6. Restart the device after making these changes.

After the restart, all http.sys-based server applications on that device will no longer serve HTTP/3 clients.

Note: If either value is not present, no change is required for that value.

Restore: To undo this change, double-click the exported .reg file (or in Registry Editor, select File > Import) to restore the previous settings.

After you install the security update, you no longer need this mitigation.