1643 matches found
EUVD-2026-57919
Issue summary: When an OpenSSL QUIC server Listener SSL object processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit. Impact summary: A remote peer that can make many Initial packets reach the serve...
PT-2026-71607
Name of the Vulnerable Software and Affected Versions OpenSSL versions 3.5 and later Description An OpenSSL QUIC server can allocate and queue new incoming channels without enforcing a limit when processing valid QUIC Initial packets for unknown destination connection IDs. The system uses the...
OpenSSL 3.5.0 < 3.5.8 Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 3.5.8. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.5.8 advisory. - Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging...
openSUSE 16: libunbound8 / python3-unbound / unbound / unbound-anchor / etc (openSUSE-SU-2026:21550-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21550-1 advisory. Update to version 1.25.2. Security issues fixed: - CVE-2026-14586: DoS via assertion in libngtcp2 for DNS-over-QUIC environments with high...
GHSA-C494-M2FQ-59MX Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft QUIC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A use after free in Microsoft QUIC allows an...
Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft QUIC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A use after free in Microsoft QUIC allows an...
CVE-2026-62898
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
CVE-2026-62898
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
CVE-2026-62815
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
UBUNTU-CVE-2026-62898
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
EUVD-2026-56773
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
CVE-2026-62898 Microsoft QUIC Information Disclosure Vulnerability
...
CVE-2026-62898
CVE-2026-62898 describes a use-after-free in Microsoft QUIC that enables an unauthenticated attacker to disclose information over the network. The connected documents confirm the vulnerability type and impact (information disclosure) but do not provide affected versions, impacted components beyon...
CVE-2026-62898 Microsoft QUIC Information Disclosure Vulnerability
...
CVE-2026-62815 Microsoft QUIC Remote Code Execution Vulnerability
...
CVE-2026-62815 Microsoft QUIC Remote Code Execution Vulnerability
...
CVE-2026-62815
CVE-2026-62815 describes a use-after-free in Microsoft QUIC that could allow a remote attacker to execute code over the network. The connected sources confirm the vulnerability type but do not specify affected products, versions, exploit details, or available patches. No remediation steps are pro...
EUVD-2026-56392
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
