CVE Catalog
CVE-2026-105016
CriticalCVSS 9.8Summary
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely take control of the system, potentially leading to full compromise.
Recommendation
Install the latest security updates from Microsoft.
Other vulnerabilities in Microsoft QUIC
See all- CVE-2026-100219Critical
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
- CVE-2026-62815Critical
A use-after-free vulnerability in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
- CVE-2026-62898High
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS