1660 matches found
CVE-2026-6060-QUIC-Handshake-Amplification-via-Address-Validation-Bypass
CVE-2026-6060 – एड्रेस सत्यापन बाईपास के ज़रिए QUIC हैंडशेक एम्प्लीफिकेशन प्रोग्राम कोड Python सिमुलेशन root@kitploit: quicserversim.py - Vulnerable QUIC server simulated handshake import socket def sendquicinitialconn, addr, serversalt: Respond with a large "server hello" without validating sour...
PT-2026-81524
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the QUIC protocol, which is a transport layer network protocol designed to reduce connection latency. A remote attacker can leak sensitive information by...
UBUNTU-CVE-2026-63075
QUIC ACK-only Packet Retention Can Cause Memory Exhaustion...
PT-2026-81300
Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A double free issue exists in the OpenSSL QUIC server when channel creation fails for an initial packet. The port default packet handler function creates a QRX QUIC record layer RX object for...
UBUNTU-CVE-2026-18798
QUIC Server May Trigger Double Free When Processing INITIAL Packet...
PT-2026-81577
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An externally controlled reference in the QUIC protocol allows a remote attacker to bypass the web origin policy through the use of a crafted HTML page. QUIC is a transport layer networ...
OpenSSL -- Multiple vulnerabilities
The OpenSSL poject reports: Heap Buffer Overflow in CMS Key Unwrapping CVE-2026-63072 Moderate Invalid Pointer Dereference in CMP Server via Crafted protectionAlg CVE-2026-63076 Moderate RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate CVE-2026-14457 Low Excessive...
Linux Distros Unpatched Vulnerability : CVE-2026-18798
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: QUIC server may double free QRX QUIC record layer RX object when channel creation fails for initial packet. Impact summary: Double free leads to...
Linux Distros Unpatched Vulnerability : CVE-2026-63075
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC...
PT-2026-81306
Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description When processing QUIC traffic, the QUIC stack may retain metadata for ACK-only packets for the entire duration of a connection if a peer repeatedly sends ack-eliciting packets without...
CVE-2026-18798
QUIC Server May Trigger Double Free When Processing INITIAL Packet...
CVE-2026-63075
QUIC ACK-only Packet Retention Can Cause Memory Exhaustion...
CVE-2026-25800
A flaw was found in Quinn, a Rust implementation of the QUIC transport protocol. A remote attacker can exploit this vulnerability by sending specially crafted QUIC stream fragments with many gaps. This can lead to high buffer overhead in the Assembler component, causing memory exhaustion and a...
openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server
A flaw was found in OpenSSL. A remote attacker could exploit this by sending a large number of QUIC Initial packets to an OpenSSL QUIC server. This can cause the server to allocate and queue new incoming channels without limit, leading to unbounded memory growth. The excessive memory consumption...
Linux Distros Unpatched Vulnerability : CVE-2026-62898
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. CVE-2026-62898 Note that Nessus relies on the presence ...
CVE-2026-14456
A flaw was found in OpenSSL. A remote attacker could exploit this by sending a large number of QUIC Initial packets to an OpenSSL QUIC server. This can cause the server to allocate and queue new incoming channels without limit, leading to unbounded memory growth. The excessive memory consumption...
BIT-DOTNET-SDK-2026-62898 Microsoft QUIC Information Disclosure Vulnerability
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
BIT-DOTNET-2026-62898 Microsoft QUIC Information Disclosure Vulnerability
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...