Skip to content
OpenAdvisories

Product · Microsoft

msquic

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-105794

    MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL

    MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rust. Prior to 2.4.20, 2.5.11, and 2.6.1, MsQuic clients using the OpenSSL or QuicTLS TLS backend do not properly verify that a server certificate matches the int…

    Microsoft msquic Microsoft.Native.Quic.MsQuic.OpenSSL NuGet