98 matches found
GHSA-5GJQ-3F94-RCF7 Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft QUIC as used by .NET 8.0, .NET 9.0, .NET 10.0, and .NET 11 RC2 on Windows. This advisory also provides guidance on what developers can do to update their applications to remov...
Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft QUIC as used by .NET 8.0, .NET 9.0, .NET 10.0, and .NET 11 RC2 on Windows. This advisory also provides guidance on what developers can do to update their applications to remov...
CVE-2026-85790
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
CVE-2026-105016
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
CVE-2026-103577
Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-100219
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
EUVD-2026-100459
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
CVE-2026-105016
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
CVE-2026-105016
A heap-based buffer overflow exists in Microsoft QUIC , which could allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability is classified as CRITICAL with a CVSS score of 9.80 . Affected systems connected to public networks are at a higher risk, as actual abuse...
CVE-2026-105016
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
CVE-2026-103577
A vulnerability in Microsoft QUIC exists due to insecure default variable initialization (CWE-453). This flaw allows an unauthorized attacker to bypass a security feature over a network. The vulnerability has a HIGH base severity score of 7.5, with high impact on availability and low impact on in...
CVE-2026-100219
A Use after free vulnerability exists in Microsoft QUIC , allowing an unauthorized attacker to achieve remote code execution over a network. This vulnerability is part of a broader set of critical issues in Windows components. For actual abuse, no prior authentication is required, and exploitatio...
EUVD-2026-99502
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
CVE-2026-85790
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
CVE-2026-85790
A Use after free vulnerability in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. The vulnerability is characterized by a high confidentiality impact, though it does not affect integrity or availability. Remediation is available via an official fix provided ...
CVE-2026-85790
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
Microsoft QUIC Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
Microsoft QUIC Information Disclosure Vulnerability
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
