58 matches found
Microsoft QUIC: Remote Code Execution Vulnerability
Summary Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. Details New network path creations and removals triggered by incoming packets can lead to a pointer invalidation. Patches - Guard path promotion e0f55b5 Impact An unauthenticated attacker coul...
GHSA-92F5-VC22-8J33 Microsoft QUIC: Remote Code Execution Vulnerability
Summary Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. Details New network path creations and removals triggered by incoming packets can lead to a pointer invalidation. Patches - Guard path promotion e0f55b5 Impact An unauthenticated attacker coul...
EUVD-2026-56392
Microsoft QUIC: Remote Code Execution Vulnerability...
Unbounded Memory Growth in QUIC Server Incoming Channel Queue
...
Linux Distros Unpatched Vulnerability : CVE-2026-62898
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. CVE-2026-62898 Note that Nessus relies on the presence ...
BIT-DOTNET-SDK-2026-62898 Microsoft QUIC Information Disclosure Vulnerability
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
BIT-DOTNET-2026-62898 Microsoft QUIC Information Disclosure Vulnerability
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
PT-2026-73264
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
PT-2026-73274
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
Duplicate Advisory: Microsoft QUIC Remote Code Execution Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-92f5-vc22-8j33. This link is maintained to preserve external references. Original Description Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
GHSA-C494-M2FQ-59MX Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft QUIC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A use after free in Microsoft QUIC allows an...
Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft QUIC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A use after free in Microsoft QUIC allows an...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free via the Microsoft QUIC process. An attacker can access sensitive information by sending specially crafted network requests. Remediation Upgrade Microsoft.NETCore.App.Runtime.win-x64 to version 8.0.30, 9.0.19, 10.0.11 or...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free via the Microsoft QUIC process. An attacker can access sensitive information by sending specially crafted network requests. Remediation Upgrade Microsoft.NETCore.App.Runtime.win-x86 to version 8.0.30, 9.0.19, 10.0.11 or...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free via the Microsoft QUIC process. An attacker can access sensitive information by sending specially crafted network requests. Remediation Upgrade Microsoft.NETCore.App.Runtime.win-arm64 to version 8.0.30, 9.0.19, 10.0.11 or...
CVE-2026-62898
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
CVE-2026-62898
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
CVE-2026-62815
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
