CVE Catalog
CVE-2026-100219
CriticalCVSS 9.8Summary
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute code, potentially leading to system compromise or data breach.
Recommendation
Apply available security updates from Microsoft for the QUIC component.
Other vulnerabilities in Microsoft QUIC
See all- CVE-2026-105016Critical
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
- CVE-2026-62815Critical
A use-after-free vulnerability in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
- CVE-2026-62898High
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
Original NVD description (English source)
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS