Skip to content
OpenAdvisories
High MSRC-CVE-2026-85790 1 CVE

Microsoft QUIC Information Disclosure Vulnerability

Published Oct 13, 2026 · Updated Oct 16, 2026 · Revision 3

Vendor: Microsoft

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.

What type of information could be disclosed by this vulnerability?
An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.

Security updates
10.0.26300.9711 — https://support.microsoft.com/help/5127648
18.10.4 — https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes
17.14.42 — https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
2.6.2 — https://github.com/dotnet/announcements/issues/470
10.0.20348.5761 — https://support.microsoft.com/help/5126655
10.0.26100.33650 — https://support.microsoft.com/help/5126646
10.0.22631.7652 — https://support.microsoft.com/help/5126653
10.0.28000.3231 — https://support.microsoft.com/help/5127646

Vulnerabilities 1

Revision history

  1. #3

    Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.

  2. #2

    Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged.

  3. #1

    Information published.

References