CERT24CVE-2026-105016 — Microsoft QUIC Remote Code Execution VulnerabilityLoading data…
CERT24Threat Observatory
Period

CVE-2026-105016 — Microsoft QUIC Remote Code Execution Vulnerability

A heap-based buffer overflow vulnerability in Microsoft QUIC may allow an unauthenticated attacker to execute arbitrary code remotely over a network. The vulnerability affects projects using Microsoft .NET 8.0, .NET 9.0, .NET 10.0, and .NET 11 RC2 on Windows when they use an affected package version.

← Back to intelligence

CVE-2026-105016 — Microsoft QUIC Remote Code Execution Vulnerability

A heap-based buffer overflow vulnerability in Microsoft QUIC may allow an unauthenticated attacker to execute arbitrary code remotely over a network. The vulnerability affects projects using Microsoft .NET 8.0, .NET 9.0, .NET 10.0, and .NET 11 RC2 on Windows when they use an affected package version.