{"id":"EUVD-2026-100459","enisaUuid":"b42ffa7d-85f8-31a7-9bbc-3f5d51d3a2bb","description":"Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.","datePublished":"Oct 13, 2026, 7:01:45 PM","dateUpdated":"Oct 27, 2026, 9:37:14 PM","baseScore":9.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105016\n","aliases":"CVE-2026-105016\nGHSA-5gjq-3f94-rcf7\n","assigner":"microsoft","epss":1.66,"enisaIdProduct":[{"id":"1ff2a29c-70dc-37b8-80b1-3697fce1b3f6","product":{"name":"Windows 11 Version 25H2","vendor":{"name":"Microsoft"}},"product_version":"10.0.26200.0 \u003c10.0.26200.9711"},{"id":"2ae9d478-98be-3fc8-ae26-228ef7605c41","product":{"name":".NET 10.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.14"},{"id":"34d2a02c-b019-3860-84e6-1faea13b52a4","product":{"name":"Windows Server 2022","vendor":{"name":"Microsoft"}},"product_version":"10.0.20348.0 \u003c10.0.20348.5761"},{"id":"4365a029-47e2-35f5-8f02-e3d6cb19a32f","product":{"name":"Windows 11 Version 26H2","vendor":{"name":"Microsoft"}},"product_version":"10.0.26300.0 \u003c10.0.26300.9711"},{"id":"43c4d3af-47d1-38be-9eab-7e8cc0913860","product":{"name":".NET 9.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"9.0.0 \u003c9.0.21"},{"id":"58096276-cbb6-3c2e-87b6-3f4e5a516c3c","product":{"name":"Windows 11 Version 23H2","vendor":{"name":"Microsoft"}},"product_version":"10.0.22631.0 \u003c10.0.22631.7652"},{"id":"685a668f-c87b-3de8-ac6b-ac91391547d4","product":{"name":".NET 8.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"8.0.0 \u003c8.0.32"},{"id":"6cf95baa-4515-3bc1-86a0-651726ea6d56","product":{"name":"Windows Server 2025 (Server Core installation)","vendor":{"name":"Microsoft"}},"product_version":"10.0.26100.0 \u003c10.0.26100.33650"},{"id":"91710c24-0ee2-3b5a-918b-5d656ba4cfb5","product":{"name":"Windows 11 Version 24H2","vendor":{"name":"Microsoft"}},"product_version":"10.0.26100.0 \u003c10.0.26100.9711"},{"id":"97a61f35-4f21-31de-82cb-4dfea50d7a73","product":{"name":"Windows Server 2025","vendor":{"name":"Microsoft"}},"product_version":"10.0.26100.0 \u003c10.0.26100.33650"},{"id":"9d98fceb-3725-3287-a3cc-d23e7476a36a","product":{"name":"Microsoft Visual Studio 2026 version 18.10","vendor":{"name":"Microsoft"}},"product_version":"18.10.0 \u003c18.10.4"},{"id":"a721b0d3-7154-3aaa-861d-c5d6d4186fa5","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.42"},{"id":"c69b0756-2ba1-3f0f-bcb0-3d1dcf425c79","product":{"name":"Windows 11 version 26H1","vendor":{"name":"Microsoft"}},"product_version":"10.0.28000.0 \u003c10.0.28000.3231"},{"id":"ca5ede65-926f-3c2d-998a-578c303bc40b","product":{"name":".NET 11.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"11.0.0 \u003c11.0.0-rc.2.26504.105"}],"enisaIdVendor":[{"id":"58a5f933-1cf7-3f28-b27f-365cebd5e3e8","vendor":{"name":"Microsoft"}}],"enisaIdVulnerability":[{"id":"5390a316-9c5d-354d-8a1c-206b6ad97351","vulnerability":{"id":"GHSA-5gjq-3f94-rcf7","description":"Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability","datePublished":"Oct 13, 2026, 7:56:35 PM","dateUpdated":"Oct 13, 2026, 7:56:35 PM","baseScore":0.0,"references":"https://github.com/dotnet/runtime/security/advisories/GHSA-5gjq-3f94-rcf7\nhttps://github.com/dotnet/announcements/issues/446\nhttps://github.com/dotnet/runtime/issues/135695\nhttps://github.com/dotnet/runtime\n","enisa_id":"EUVD-2026-100459\n","aliases":"GHSA-5gjq-3f94-rcf7\nCVE-2026-105016\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:03:05 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"af3c6f27-c2d8-345c-b9ae-40c99f007614","vulnerability":{"id":"CVE-2026-105016","description":"Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.","datePublished":"Oct 13, 2026, 7:01:45 PM","dateUpdated":"Oct 27, 2026, 9:37:14 PM","status":"PUBLISHED","baseScore":9.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105016\n","enisa_id":"EUVD-2026-100459\n","assigner":"microsoft","epss":1.66,"dataProcessed":"Oct 28, 2026, 2:00:19 AM","vulnerabilityProduct":[{"id":"2b5fe087-2c3e-350d-b899-093db3996bad","product":{"name":"Windows 11 Version 26H2","vendor":{"name":"Microsoft"}},"product_version":"10.0.26300.0 \u003c10.0.26300.9711"},{"id":"2c8f300a-ae33-325e-9cb8-d68f9fd85613","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.42"},{"id":"302d0d1b-e742-3bd3-8c15-c216740bfb28","product":{"name":"Windows Server 2025 (Server Core installation)","vendor":{"name":"Microsoft"}},"product_version":"10.0.26100.0 \u003c10.0.26100.33650"},{"id":"379b568b-30d9-3a18-a2af-532eecd2f64d","product":{"name":".NET 11.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"11.0.0 \u003c11.0.0-rc.2.26504.105"},{"id":"4f0382ca-d8bf-39e3-a6bd-47fabf5cfb76","product":{"name":"Windows Server 2025","vendor":{"name":"Microsoft"}},"product_version":"10.0.26100.0 \u003c10.0.26100.33650"},{"id":"71b60431-aa44-33f6-8d98-580494fa5c47","product":{"name":"Windows 11 version 26H1","vendor":{"name":"Microsoft"}},"product_version":"10.0.28000.0 \u003c10.0.28000.3231"},{"id":"7e85dbbc-0ced-3664-9124-b18d0be4af7b","product":{"name":"Windows 11 Version 23H2","vendor":{"name":"Microsoft"}},"product_version":"10.0.22631.0 \u003c10.0.22631.7652"},{"id":"8907ad22-7951-300f-ab07-ac78b863661e","product":{"name":".NET 10.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.14"},{"id":"895f7a55-b8b4-357a-9690-72f63b6554d6","product":{"name":"Microsoft Visual Studio 2026 version 18.10","vendor":{"name":"Microsoft"}},"product_version":"18.10.0 \u003c18.10.4"},{"id":"98bd7901-c4b9-3533-b5fc-47658f643350","product":{"name":"Windows Server 2022","vendor":{"name":"Microsoft"}},"product_version":"10.0.20348.0 \u003c10.0.20348.5761"},{"id":"a9043d60-2f55-3583-8df7-301c2538f314","product":{"name":"Windows 11 Version 24H2","vendor":{"name":"Microsoft"}},"product_version":"10.0.26100.0 \u003c10.0.26100.9711"},{"id":"aa76879e-5544-3642-9279-5d407ee97289","product":{"name":".NET 8.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"8.0.0 \u003c8.0.32"},{"id":"ae2d8ea7-34d2-32c3-84c3-70ed6ad33ccb","product":{"name":".NET 9.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"9.0.0 \u003c9.0.21"},{"id":"beca91cb-5798-3c08-98f2-3f09602391d0","product":{"name":"Windows 11 Version 25H2","vendor":{"name":"Microsoft"}},"product_version":"10.0.26200.0 \u003c10.0.26200.9711"},{"id":"cc1e431f-2236-32cd-9e68-3ecc6e7a1e69","product":{"name":"Windows 11 Version 23H2","vendor":{"name":"Microsoft"}},"product_version":"10.0.22631.0 \u003c10.0.22631.7652"}],"vulnerabilityVendor":[{"id":"13bd4a80-3e7b-336c-ba13-ccd4830fc067","vendor":{"name":"Microsoft"}}]}}],"enisaIdAdvisory":[{"id":"3374f6d8-8e8a-38be-b33a-42811cb958d0","advisory":{"id":"NCSC-2026-0423","description":"Kwetsbaarheden verholpen in Microsoft Windows","datePublished":"Oct 13, 2026, 6:49:46 PM","dateUpdated":"Oct 13, 2026, 6:49:46 PM","baseScore":0.0,"references":"","aliases":"CVE-2026-100202\nCVE-2026-100219\nCVE-2026-100222\nCVE-2026-102210\nCVE-2026-105008\nCVE-2026-21413\nCVE-2026-69634\nCVE-2026-69639\nCVE-2026-69705\nCVE-2026-69883\nCVE-2026-69886\nCVE-2026-70024\nCVE-2026-70096\nCVE-2026-70147\nCVE-2026-70153\nCVE-2026-70157\nCVE-2026-70188\nCVE-2026-83517\nCVE-2026-83519\nCVE-2026-83578\nCVE-2026-83693\nCVE-2026-83748\nCVE-2026-83770\nCVE-2026-83780\nCVE-2026-83782\nCVE-2026-83862\nCVE-2026-83869\nCVE-2026-83910\nCVE-2026-83935\nCVE-2026-84015\nCVE-2026-85792\nCVE-2026-85806\nCVE-2026-85809\nCVE-2026-85814\nCVE-2026-85818\nCVE-2026-85844\nCVE-2026-85928\nCVE-2026-88092\nCVE-2026-88102\nCVE-2026-94510\nCVE-2026-96096\nCVE-2026-96219\nCVE-2026-96252\nCVE-2026-96320\nCVE-2026-96864\nCVE-2026-96909\nCVE-2026-96924\nCVE-2026-96934\nCVE-2026-97814\nCVE-2026-97815\nCVE-2026-97816\nCVE-2026-105016\n","source":{"id":19,"name":"csaf_ncscnl"},"advisoryProduct":[{"id":"06f86cdf-0081-3cf9-8246-02715d59df28","product":{"name":"Windows 11 Version 23H2 for x64-based Systems","vendor":{"name":"Microsoft"}}},{"id":"154810ad-407e-3b8a-a385-5a8eebb956ec","product":{"name":"Windows 11 Version 24H2 for ARM64-based Systems","vendor":{"name":"Microsoft"}}},{"id":"1d995ece-5902-35ea-8551-cb46fa5584b8","product":{"name":"Windows Server 2012 R2","vendor":{"name":"Microsoft"}}},{"id":"29403c15-8f7b-30ab-96e6-a198703e00b8","product":{"name":"Windows 11 Version 25H2 for x64-based Systems","vendor":{"name":"Microsoft"}}},{"id":"2ab4918d-3278-3e6d-9f03-513d42d7d57d","product":{"name":"Windows 10 Version 21H2 for x64-based Systems","vendor":{"name":"Microsoft"}}},{"id":"2ba4243d-bf8f-3ed9-a42b-7f9d898a7368","product":{"name":"Windows 10 Version 1809 for 32-bit Systems","vendor":{"name":"Microsoft"}}},{"id":"32deb67b-363e-35cf-a9e1-1d54633bee4b","product":{"name":"Windows Server 2025 (Server Core installation)","vendor":{"name":"Microsoft"}}},{"id":"4145a91e-a4bb-3be2-b261-762232fba2ce","product":{"name":"Windows 10 Version 22H2 for ARM64-based Systems","vendor":{"name":"Microsoft"}}},{"id":"425edd9f-943d-3f61-8586-cb91accf1720","product":{"name":"Windows Server 2012 R2 (Server Core installation)","vendor":{"name":"Microsoft"}}},{"id":"48d5b5e9-6513-37ed-813c-439d41159c4b","product":{"name":"Windows Server 2022","vendor":{"name":"Microsoft"}}},{"id":"4ae1781b-b068-3a94-a723-1ac7f463464a","product":{"name":"Windows Server 2016","vendor":{"name":"Microsoft"}}},{"id":"4fbe2a38-763b-311f-8d2b-284e65746498","product":{"name":"Windows 10 Version 21H2 for ARM64-based Systems","vendor":{"name":"Microsoft"}}},{"id":"66683a71-f759-3e9c-815e-c63a50f1dbe4","product":{"name":"Windows Server 2016 (Server Core installation)","vendor":{"name":"Microsoft"}}},{"id":"676b9e92-be49-3ff4-9f19-bff262f088d8","product":{"name":"Windows Server 2012","vendor":{"name":"Microsoft"}}},{"id":"6ec901b2-6375-36a8-9165-859933181bf4","product":{"name":"Windows 11 Version 25H2 for ARM64-based Systems","vendor":{"name":"Microsoft"}}},{"id":"7720a711-81b1-3b8c-8e5a-5b4b4efd7b87","product":{"name":"Windows 10 Version 1607 for 32-bit Systems","vendor":{"name":"Microsoft"}}},{"id":"7e3a35a2-3102-39d3-a33e-717eafcee2ba","product":{"name":"Windows 11 Version 23H2 for ARM64-based Systems","vendor":{"name":"Microsoft"}}},{"id":"86b6a403-3f17-345e-9958-7c3fbeec2ce1","product":{"name":"Windows Server 2019","vendor":{"name":"Microsoft"}}},{"id":"9834d160-4b2f-37fb-85b7-cb0b5589fda3","product":{"name":"Windows 10 Version 1607 for x64-based Systems","vendor":{"name":"Microsoft"}}},{"id":"992e2e49-b71e-3637-8d9e-9336c6d570bd","product":{"name":"Windows Server 2022 (Server Core installation)","vendor":{"name":"Microsoft"}}},{"id":"9ef72550-085f-32c9-a569-1530510ffe66","product":{"name":"Windows 11 Version 24H2 for x64-based Systems","vendor":{"name":"Microsoft"}}},{"id":"c1df1d59-5390-37ca-83e4-d7b1cd8f7531","product":{"name":"Windows 10 Version 22H2 for 32-bit Systems","vendor":{"name":"Microsoft"}}},{"id":"c5138b40-e75b-3980-8334-b2c716fb69f0","product":{"name":"Windows 11 version 26H1 for x64-based Systems","vendor":{"name":"Microsoft"}}},{"id":"c72d7803-1312-343b-ad33-dad9823382b7","product":{"name":"Windows Server 2025","vendor":{"name":"Microsoft"}}},{"id":"ca4f2c65-ddcc-3575-817f-4f4f265557e4","product":{"name":"Windows 11 Version 26H1 for ARM64-based Systems","vendor":{"name":"Microsoft"}}},{"id":"ce32e747-71fc-3e72-b573-63c2edf1965b","product":{"name":"Windows 10 Version 22H2 for x64-based Systems","vendor":{"name":"Microsoft"}}},{"id":"de95c53f-e567-32a4-ab2b-e8bf8f7aaf2b","product":{"name":"Windows 10 Version 21H2 for 32-bit Systems","vendor":{"name":"Microsoft"}}},{"id":"e1d27e9a-675f-38ba-b2e9-9fff643cb479","product":{"name":"Windows 10 Version 1809 for x64-based Systems","vendor":{"name":"Microsoft"}}},{"id":"e31c887b-1276-3ecb-8347-b2dbe5b368ff","product":{"name":"Windows Server 2012 (Server Core installation)","vendor":{"name":"Microsoft"}}},{"id":"fee4e26f-24bc-3ebd-a7fc-563f5841f95f","product":{"name":"Windows Server 2019 (Server Core installation)","vendor":{"name":"Microsoft"}}}]}}]}