CVE-2026-105016Published
Microsoft QUIC Remote Code Execution Vulnerability
cve-program · CVE-2026-105016
Published.NET 10.0 runtime
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": ".NET 10.0 runtime",
"versions": [
{
"version": "10.0.0",
"lessThan": "10.0.14",
"versionType": "custom",
"status": "affected"
}
]
}.NET 11.0 runtime
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": ".NET 11.0 runtime",
"versions": [
{
"version": "11.0.0",
"lessThan": "11.0.0-rc.2.26504.105",
"versionType": "custom",
"status": "affected"
}
]
}.NET 8.0 runtime
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": ".NET 8.0 runtime",
"versions": [
{
"version": "8.0.0",
"lessThan": "8.0.32",
"versionType": "custom",
"status": "affected"
}
]
}.NET 9.0 runtime
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": ".NET 9.0 runtime",
"versions": [
{
"version": "9.0.0",
"lessThan": "9.0.21",
"versionType": "custom",
"status": "affected"
}
]
}Microsoft Visual Studio 2022 version 17.14
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": "Microsoft Visual Studio 2022 version 17.14",
"versions": [
{
"version": "17.14.0",
"lessThan": "17.14.42",
"versionType": "custom",
"status": "affected"
}
]
}Microsoft Visual Studio 2026 version 18.10
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": "Microsoft Visual Studio 2026 version 18.10",
"versions": [
{
"version": "18.10.0",
"lessThan": "18.10.4",
"versionType": "custom",
"status": "affected"
}
]
}Windows 11 version 23H2
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": "Windows 11 version 23H2",
"platforms": [
"ARM64-based Systems"
],
"versions": [
{
"version": "10.0.22631.0",
"lessThan": "10.0.22631.7652",
"versionType": "custom",
"status": "affected"
}
]
}Windows 11 Version 23H2
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": "Windows 11 Version 23H2",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.22631.0",
"lessThan": "10.0.22631.7652",
"versionType": "custom",
"status": "affected"
}
]
}Windows 11 Version 24H2
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": "Windows 11 Version 24H2",
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.9711",
"versionType": "custom",
"status": "affected"
}
]
}Windows 11 Version 25H2
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": "Windows 11 Version 25H2",
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26200.0",
"lessThan": "10.0.26200.9711",
"versionType": "custom",
"status": "affected"
}
]
}Windows 11 version 26H1
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": "Windows 11 version 26H1",
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.28000.0",
"lessThan": "10.0.28000.3231",
"versionType": "custom",
"status": "affected"
}
]
}Windows 11 Version 26H2
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": "Windows 11 Version 26H2",
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26300.0",
"lessThan": "10.0.26300.9711",
"versionType": "custom",
"status": "affected"
}
]
}Windows Server 2022
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": "Windows Server 2022",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.20348.0",
"lessThan": "10.0.20348.5761",
"versionType": "custom",
"status": "affected"
}
]
}Windows Server 2025
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": "Windows Server 2025",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.33650",
"versionType": "custom",
"status": "affected"
}
]
}Windows Server 2025 (Server Core installation)
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Microsoft",
"product": "Windows Server 2025 (Server Core installation)",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.33650",
"versionType": "custom",
"status": "affected"
}
]
}osv · GHSA-5gjq-3f94-rcf7
PublishedMicrosoft.Native.Quic.MsQuic.Schannel
NuGet
ECOSYSTEM · introduced 2.5.11-ci.156755675 → fixed 2.5.11-ci.159417053
1 explicitly affected versions
2.5.11-ci.156755675