Microsoft.Native.Quic.MsQuic.OpenSSL

3 results · Clear filters · Feed

• Critical 9.1
  CVE-2026-105794

  MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL

  MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rust. Prior to 2.4.20, 2.5.11, and 2.6.1, MsQuic clients using the OpenSSL or QuicTLS TLS backend do not properly verify that a server certificate matches the int…

  Microsoft msquic Microsoft.Native.Quic.MsQuic.OpenSSL NuGet
  Oct 6, 2026
• Critical 9.8
  CVE-2026-62815

  Microsoft QUIC Remote Code Execution Vulnerability

  Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

  Microsoft Windows Server 2022 Windows Server 2025 Windows Server 2025 (Server Core installation) Windows NuGet
  Aug 11, 2026
• Critical 9.8
  CVE-2026-32179

  MsQuic has a Remote Elevation of Privilege Vulnerability

  ### Summary Improper input validation in Microsoft QUIC allows an unauthorized attacker to elevate privileges over a network. ### Details Improper Input Validation Integer Underflow (Wrap or Wraparound) when decoding ACK frame. #### Patches - Fix underflow in…

  Microsoft.Native.Quic.MsQuic.Schannel Microsoft.Native.Quic.MsQuic.OpenSSL NuGet
  Apr 16, 2026