{"id":"EUVD-2026-56773","enisaUuid":"62265b90-b3fd-3fde-b3d0-4200922f7321","description":"Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.","datePublished":"Aug 11, 2026, 5:07:16 PM","dateUpdated":"Oct 28, 2026, 8:08:41 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62898\n","aliases":"CVE-2026-62898\nGHSA-c494-m2fq-59mx\n","assigner":"microsoft","epss":1.03,"enisaIdProduct":[{"id":"1a7d6984-e7f4-34af-b56f-dc8ce546f312","product":{"name":"Microsoft Visual Studio 2026 version 18.8","vendor":{"name":"Microsoft"}},"product_version":"18.0 \u003c18.8.3"},{"id":"4271814a-be97-3c65-8fe4-0ff80f26f55b","product":{"name":".NET 10.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.11"},{"id":"94751e69-519f-32de-a55e-9a49d76c4ef6","product":{"name":".NET 8.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"8.0.0 \u003c8.0.30"},{"id":"b33ce19b-7d5f-3712-8344-111675ef5f2e","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.38"},{"id":"b413f299-6ce0-34e7-ac9d-8c016007a86f","product":{"name":".NET 9.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"9.0.0 \u003c9.0.19"}],"enisaIdVendor":[{"id":"bc4e5506-83e6-308c-a144-b8ddc32b3bea","vendor":{"name":"Microsoft"}}],"enisaIdVulnerability":[{"id":"3748e006-7348-3f46-8b87-f46d827fb042","vulnerability":{"id":"GHSA-c494-m2fq-59mx","description":"Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability","datePublished":"Aug 11, 2026, 6:28:37 PM","dateUpdated":"Aug 11, 2026, 6:34:50 PM","baseScore":0.0,"references":"https://github.com/dotnet/runtime/security/advisories/GHSA-c494-m2fq-59mx\nhttps://github.com/dotnet/announcements/issues/426\nhttps://github.com/dotnet/runtime\n","enisa_id":"EUVD-2026-56773\n","aliases":"CVE-2026-62898\nGHSA-c494-m2fq-59mx\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:59:06 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"3c7c9dad-8a02-3b41-9aba-74eca3f99173","vulnerability":{"id":"CVE-2026-62898","description":"Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.","datePublished":"Aug 11, 2026, 5:07:16 PM","dateUpdated":"Oct 28, 2026, 8:08:41 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62898\n","enisa_id":"EUVD-2026-56773\n","assigner":"microsoft","epss":1.03,"dataProcessed":"Oct 30, 2026, 12:00:28 PM","vulnerabilityProduct":[{"id":"3d008887-9fb0-3e28-8ea2-c0d46380ac49","product":{"name":".NET 10.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"10.0.0 \u003c10.0.11"},{"id":"4548eb29-0348-32ac-9cc2-15b5ba5f413d","product":{"name":"Microsoft Visual Studio 2026 version 18.8","vendor":{"name":"Microsoft"}},"product_version":"18.0 \u003c18.8.3"},{"id":"4d27d29d-9278-3f34-b138-4d6e0e3b996b","product":{"name":".NET 9.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"9.0.0 \u003c9.0.19"},{"id":"77296463-eb25-332f-bfbd-630cf25b1648","product":{"name":".NET 8.0 runtime","vendor":{"name":"Microsoft"}},"product_version":"8.0.0 \u003c8.0.30"},{"id":"edcde05c-5def-393c-909c-52047bd9d9b4","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}},"product_version":"17.14.0 \u003c17.14.38"}],"vulnerabilityVendor":[{"id":"f3516682-6b4d-372b-8ccc-cfcd45f69e5c","vendor":{"name":"Microsoft"}}]}}],"enisaIdAdvisory":[{"id":"e0eea61d-71c7-38b4-b75b-6d236dfc430d","advisory":{"id":"msrc_CVE-2026-62898","description":"Microsoft QUIC Information Disclosure Vulnerability","datePublished":"Aug 11, 2026, 7:00:00 AM","dateUpdated":"Aug 13, 2026, 7:00:00 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-62898.json\n","aliases":"CVE-2026-62898\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"2c09cc58-dac4-38c9-935a-d581c3338bd5","product":{"name":".NET 9.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"41c3b2e2-9dae-367f-b948-760e35364ad5","product":{"name":"9.0.19","vendor":{"name":"IBM"}}},{"id":"634dfc4d-7cc0-3ae0-a947-0d1d13bede29","product":{"name":"18.8.3","vendor":{"name":"Microsoft"}}},{"id":"815e2e5b-ef04-3c91-aa00-26b2928b9ce3","product":{"name":".NET 8.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"8b5353af-a61e-3218-91a7-0f6651a46c64","product":{"name":"8.0.30","vendor":{"name":"open source"}}},{"id":"8dd4dfd8-76dc-34a5-b46b-e37835882c69","product":{"name":".NET 10.0 installed on Windows","vendor":{"name":"Microsoft"}}},{"id":"9ef4f409-3828-35bf-adf0-d52ab3520d1c","product":{"name":"Microsoft Visual Studio 2026 version 18.8","vendor":{"name":"Microsoft"}}},{"id":"bd17fafd-9638-32e1-9d0a-b10c05b906b2","product":{"name":"10.0.11","vendor":{"name":"eclipse"}}},{"id":"d1d484d5-d866-3ff9-b140-cb6849af6521","product":{"name":"Microsoft Visual Studio 2022 version 17.14","vendor":{"name":"Microsoft"}}},{"id":"f8527714-e8b7-39df-aa5b-fbc8e9c7bbc6","product":{"name":"17.14.38","vendor":{"name":"Microsoft"}}}]}}]}