CVE-2025-54939

PoC per QUIC-LEAK CVE-2025-54939 in LSQUIC Panoramica Questo PoC evidenzia la CVE-2025-54939, una vulnerabilità di esaurimento della memoria pre-handshake Denial of Service nell'implementazione QUIC di LSQUIC. Il problema, denominato QUIC-LEAK, è stato documentato per la prima volta da Imperva:...

ssh3

!NOTE SSH3 wird wahrscheinlich seinen Namen ändern. Es ist immer noch das SSH-Verbindungsprotokoll RFC4254, das auf HTTP/3 Extended Connect läuft, aber die erforderlichen Änderungen sind umfangreich und zu weit entfernt von der Philosophie gängiger SSH-Implementierungen, um für eine Integration i...

openssl

Bem-vindo ao Projeto OpenSSL OpenSSL é um kit de ferramentas de código aberto robusto, de nível comercial e completo para os protocolos Transport Layer Security TLS, anteriormente SSL, Datagram TLS DTLS e QUIC. As implementações dos protocolos são baseadas em uma biblioteca criptográfica de uso...

CVE-2026-4253-Scanner

CVE-2026-42530 — Safe-Check Scanner Scanner di massa non distruttivo per il use-after-free di NGINX HTTP/3 QUIC Fai l'inventario di quali dei tuoi host sono esposti — senza mai attivare il bug. ⚠️ Avvertenze Questo strumento è destinato esclusivamente a test di sicurezza autorizzati — sulla tua...

CVE-2026-63075

A flaw was found in OpenSSL. The QUIC protocol implementation retains metadata for ACK-only packets for the lifetime of a connection, leading to excessive memory consumption. This allows a peer to repeatedly send ack-eliciting packets while not acknowledging ACK-only responses to cause memory...

CVE-2026-6060-QUIC-Handshake-Amplification-via-Address-Validation-Bypass

CVE-2026-6060 – एड्रेस सत्यापन बाईपास के ज़रिए QUIC हैंडशेक एम्प्लीफिकेशन प्रोग्राम कोड Python सिमुलेशन root@kitploit: quicserversim.py - Vulnerable QUIC server simulated handshake import socket def sendquicinitialconn, addr, serversalt: Respond with a large "server hello" without validating sour...

PT-2026-81524

Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

OpenSSL -- Multiple vulnerabilities

The OpenSSL poject reports: Heap Buffer Overflow in CMS Key Unwrapping CVE-2026-63072 Moderate Invalid Pointer Dereference in CMP Server via Crafted protectionAlg CVE-2026-63076 Moderate RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate CVE-2026-14457 Low Excessive...

CVE-2026-63075

QUIC ACK-only Packet Retention Can Cause Memory Exhaustion...

CVE-2026-25800

A flaw was found in Quinn, a Rust implementation of the QUIC transport protocol. A remote attacker can exploit this vulnerability by sending specially crafted QUIC stream fragments with many gaps. This can lead to high buffer overhead in the Assembler component, causing memory exhaustion and a...

CVE-2026-17673

Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-17733

Inappropriate implementation in QUIC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17733

In Chrome on Android, CVE-2026-17733 is tied to an inappropriate QUIC implementation that could allow a remote attacker to leak cross-origin data via a crafted HTML page. Affected product/component: Google Chrome (Android) with QUIC; root cause: insecure QUIC handling leading to cross-origin data...

CVE-2026-17673

CVE-2026-17673: An integer overflow in QUIC within Google Chrome’s renderer can, via a crafted HTML page, potentially allow a sandbox escape. Affected: Google Chrome (desktop) prior to 151.0.7922.72. Root cause: integer overflow in QUIC handling. Impact: remote code execution with sandbox escape ...

PT-2026-65992

Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-25800

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the Assembler...

Astra Linux – Vulnerability in Chromium

Using “after free” in QUIC in Google Chrome before version 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption through malicious network traffic. Chromium security severity: High...

Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2

...

CVE-2026-32665

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC DoQ is enabled, the first two bidirectional streams on a new QUIC connection streamid 0 and 4 bypass the per-stream 'quic-size' gate entirely, and large input buffers are allocated later, after only the 2-byte...

CVE-2026-16318

A flaw was found in s2n-tls, a Transport Layer Security TLS implementation. An unauthenticated remote attacker can exploit a memory leak in the QUIC transport parameters extension handler. By repeatedly forcing HelloRetryRequests during a TLS 1.3 connection, an attacker can cause the server proce...