Security Advisory catalog GHSA-92f5-vc22-8j33
cve-program · CVE-2026-62815 Published Windows 11 version 23H2 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Windows 11 version 23H2",
"platforms": [
"ARM64-based Systems"
],
"versions": [
{
"version": "10.0.22631.0",
"lessThan": "10.0.22631.7517",
"versionType": "custom",
"status": "affected"
}
]
} Windows 11 Version 23H2 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Windows 11 Version 23H2",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.22631.0",
"lessThan": "10.0.22631.7517",
"versionType": "custom",
"status": "affected"
}
]
} Windows 11 Version 24H2 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Windows 11 Version 24H2",
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.9168",
"versionType": "custom",
"status": "affected"
}
]
} Windows 11 Version 25H2 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Windows 11 Version 25H2",
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26200.0",
"lessThan": "10.0.26200.9168",
"versionType": "custom",
"status": "affected"
}
]
} Windows 11 version 26H1 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Windows 11 version 26H1",
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.28000.0",
"lessThan": "10.0.28000.2704",
"versionType": "custom",
"status": "affected"
}
]
} Windows Server 2022 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Windows Server 2022",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.20348.0",
"lessThan": "10.0.20348.5499",
"versionType": "custom",
"status": "affected"
}
]
} Windows Server 2025 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Windows Server 2025",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.33296",
"versionType": "custom",
"status": "affected"
}
]
} Windows Server 2025 (Server Core installation) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Windows Server 2025 (Server Core installation)",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.33296",
"versionType": "custom",
"status": "affected"
}
]
} Original source record · Cite this exact observation · Complete original publisher JSON
euvd · EUVD-2026-56392 Published EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.
Original publisher date fields datePublished: Aug 11, 2026, 5:04:30 PM
dateUpdated: Oct 30, 2026, 5:20:19 PM
2 related source bulletins · separate from aliases msrc_CVE-2026-62815: Microsoft QUIC Remote Code Execution Vulnerability
CVE-2026-62815
NCSC-2026-0284: Kwetsbaarheden verholpen in Microsoft Windows
CVE-2026-50472 · CVE-2026-56174 · CVE-2026-54113 · CVE-2026-54984 · CVE-2026-49179 · CVE-2026-6727 · CVE-2026-59127 · CVE-2026-59128 · CVE-2026-59130 · CVE-2026-59132 · CVE-2026-59135 · CVE-2026-59134 · CVE-2026-59136 · CVE-2026-59137 · CVE-2026-59138 · CVE-2026-61345 · CVE-2026-61346 · CVE-2026-61353 · CVE-2026-61347 · CVE-2026-61348 · CVE-2026-61350 · CVE-2026-61356 · CVE-2026-61367 · CVE-2026-61923 · CVE-2026-61366 · CVE-2026-61368 · CVE-2026-61924 · CVE-2026-61925 · CVE-2026-61928 · CVE-2026-61930 · CVE-2026-61937 · CVE-2026-62692 · CVE-2026-61932 · CVE-2026-61936 · CVE-2026-61939 · CVE-2026-62690 · CVE-2026-62696 · CVE-2026-62699 · CVE-2026-62703 · CVE-2026-62707 · CVE-2026-62713 · CVE-2026-62712 · CVE-2026-62718 · CVE-2026-62715 · CVE-2026-62716 · CVE-2026-62719 · CVE-2026-62723 · CVE-2026-62724 · CVE-2026-62748 · CVE-2026-62729 · CVE-2026-62738 · CVE-2026-62746 · CVE-2026-62740 · CVE-2026-62753 · CVE-2026-62735 · CVE-2026-62739 · CVE-2026-62742 · CVE-2026-62745 · CVE-2026-62747 · CVE-2026-62750 · CVE-2026-62754 · CVE-2026-62783 · CVE-2026-62755 · CVE-2026-62758 · CVE-2026-62773 · CVE-2026-62774 · CVE-2026-62785 · CVE-2026-62777 · CVE-2026-62792 · CVE-2026-62784 · CVE-2026-62787 · CVE-2026-62795 · CVE-2026-62796 · CVE-2026-62797 · CVE-2026-62812 · CVE-2026-62816 · CVE-2026-62817 · CVE-2026-62818 · CVE-2026-62819 · CVE-2026-62820 · CVE-2026-62876 · CVE-2026-62877 · CVE-2026-62878 · CVE-2026-62889 · CVE-2026-62890 · CVE-2026-62892 · CVE-2026-62893 · CVE-2026-62894 · CVE-2026-62908 · CVE-2026-65662 · CVE-2026-65671 · CVE-2026-65678 · CVE-2026-65784 · CVE-2026-65786 · CVE-2026-65789 · CVE-2026-65787 · CVE-2026-65814 · CVE-2026-66799 · CVE-2026-68819 · CVE-2026-68820 · CVE-2026-70307 · CVE-2026-70304 · CVE-2026-70330 · CVE-2026-61352 · CVE-2026-70344 · CVE-2026-70345 · CVE-2026-70346 · CVE-2026-70347 · CVE-2026-42976 · CVE-2026-6726 · CVE-2026-59122 · CVE-2026-59125 · CVE-2026-59131 · CVE-2026-61349 · CVE-2026-61363 · CVE-2026-61364 · CVE-2026-61365 · CVE-2026-61358 · CVE-2026-61360 · CVE-2026-61920 · CVE-2026-61926 · CVE-2026-61918 · CVE-2026-61921 · CVE-2026-62698 · CVE-2026-62700 · CVE-2026-62701 · CVE-2026-62709 · CVE-2026-62710 · CVE-2026-62711 · CVE-2026-62720 · CVE-2026-62714 · CVE-2026-62717 · CVE-2026-62721 · CVE-2026-62725 · CVE-2026-62726 · CVE-2026-62728 · CVE-2026-62733 · CVE-2026-62743 · CVE-2026-62730 · CVE-2026-62732 · CVE-2026-62734 · CVE-2026-62757 · CVE-2026-62741 · CVE-2026-62752 · CVE-2026-62769 · CVE-2026-62771 · CVE-2026-62761 · CVE-2026-62768 · CVE-2026-62770 · CVE-2026-62776 · CVE-2026-62778 · CVE-2026-62782 · CVE-2026-62781 · CVE-2026-62800 · CVE-2026-62786 · CVE-2026-62790 · CVE-2026-62793 · CVE-2026-62803 · CVE-2026-62807 · CVE-2026-62814 · CVE-2026-62823 · CVE-2026-62822 · CVE-2026-62880 · CVE-2026-62881 · CVE-2026-62883 · CVE-2026-62885 · CVE-2026-62887 · CVE-2026-65681 · CVE-2026-65679 · CVE-2026-65773 · CVE-2026-65774 · CVE-2026-65775 · CVE-2026-65790 · CVE-2026-65791 · CVE-2026-65795 · CVE-2026-65794 · CVE-2026-65797 · CVE-2026-65799 · CVE-2026-65798 · CVE-2026-65796 · CVE-2026-66802 · CVE-2026-71331 · CVE-2026-62695 · CVE-2026-62702 · CVE-2026-62815 · CVE-2026-65672 · CVE-2026-59126 · CVE-2026-61359 · CVE-2026-61355 · CVE-2026-62751 · CVE-2026-62811 · CVE-2026-62832 · CVE-2026-62888 · CVE-2026-65777 · CVE-2026-61361 · CVE-2026-61927 · CVE-2026-61933 · CVE-2026-61934 · CVE-2026-62722 · CVE-2026-62737 · CVE-2026-62766 · CVE-2026-62779 · CVE-2026-62798 · CVE-2026-65785 · CVE-2026-65788 · CVE-2026-61357 · CVE-2026-61929 · CVE-2026-61938 · CVE-2026-62708 · CVE-2026-62736 · CVE-2026-62749 · CVE-2026-62780 · CVE-2026-62788 · CVE-2026-65776 · CVE-2026-56179 · CVE-2026-62688 · CVE-2026-62705 · CVE-2026-66804 · CVE-2026-62693 · CVE-2026-65783 · CVE-2026-70348 · CVE-2026-65779 · CVE-2026-65780 · CVE-2026-65778 · CVE-2026-65782 · CVE-2026-65781 · CVE-2026-62772 · CVE-2026-62775 · CVE-2026-62799 · CVE-2026-62824 · CVE-2026-59124 · CVE-2026-59133
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON
nvd · CVE-2026-62815 Published NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.
Source analysis status: Analyzed
Weakness classifications: CWE-416
Original publisher date fields published: 2026-08-11T17:18:35.320
lastModified: 2026-08-14T18:46:24.667
10 source CPE criteria · context only cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:* cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:* cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:* cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:* cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:* The original JSON retains the logical configuration operators, exclusions and version bounds.
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON
osv · GHSA-92f5-vc22-8j33 Published Microsoft.Native.Quic.MsQuic.OpenSSL NuGet
ECOSYSTEM · introduced 2.5.3 → fixed 2.5.10
Microsoft.Native.Quic.MsQuic.Schannel NuGet
ECOSYSTEM · introduced 2.5.3 → fixed 2.5.10
Microsoft.Native.Quic.MsQuic.OpenSSL NuGet
ECOSYSTEM · introduced 0 → fixed 2.4.19
1 explicitly affected versions 1.8.0
Microsoft.Native.Quic.MsQuic.Schannel NuGet
ECOSYSTEM · introduced 0 → fixed 2.4.19
1 explicitly affected versions 1.8.0
Original source record · Cite this exact observation · Complete original publisher JSON