Security Advisory catalog CVE-2026-105016 CVE-2026-105016 Published
Microsoft QUIC Remote Code Execution Vulnerability
cve-program · CVE-2026-105016 Published .NET 10.0 runtime Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 10.0 runtime",
"versions": [
{
"version": "10.0.0",
"lessThan": "10.0.14",
"versionType": "custom",
"status": "affected"
}
]
} .NET 11.0 runtime Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 11.0 runtime",
"versions": [
{
"version": "11.0.0",
"lessThan": "11.0.0-rc.2.26504.105",
"versionType": "custom",
"status": "affected"
}
]
} .NET 8.0 runtime Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 8.0 runtime",
"versions": [
{
"version": "8.0.0",
"lessThan": "8.0.32",
"versionType": "custom",
"status": "affected"
}
]
} .NET 9.0 runtime Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": ".NET 9.0 runtime",
"versions": [
{
"version": "9.0.0",
"lessThan": "9.0.21",
"versionType": "custom",
"status": "affected"
}
]
} Microsoft Visual Studio 2022 version 17.14 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Microsoft Visual Studio 2022 version 17.14",
"versions": [
{
"version": "17.14.0",
"lessThan": "17.14.42",
"versionType": "custom",
"status": "affected"
}
]
} Microsoft Visual Studio 2026 version 18.10 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Microsoft Visual Studio 2026 version 18.10",
"versions": [
{
"version": "18.10.0",
"lessThan": "18.10.4",
"versionType": "custom",
"status": "affected"
}
]
} Windows 11 version 23H2 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Windows 11 version 23H2",
"platforms": [
"ARM64-based Systems"
],
"versions": [
{
"version": "10.0.22631.0",
"lessThan": "10.0.22631.7652",
"versionType": "custom",
"status": "affected"
}
]
} Windows 11 Version 23H2 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Windows 11 Version 23H2",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.22631.0",
"lessThan": "10.0.22631.7652",
"versionType": "custom",
"status": "affected"
}
]
} Windows 11 Version 24H2 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Windows 11 Version 24H2",
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.9711",
"versionType": "custom",
"status": "affected"
}
]
} Windows 11 Version 25H2 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Windows 11 Version 25H2",
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26200.0",
"lessThan": "10.0.26200.9711",
"versionType": "custom",
"status": "affected"
}
]
} Windows 11 version 26H1 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Windows 11 version 26H1",
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.28000.0",
"lessThan": "10.0.28000.3231",
"versionType": "custom",
"status": "affected"
}
]
} Windows 11 Version 26H2 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Windows 11 Version 26H2",
"platforms": [
"ARM64-based Systems",
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26300.0",
"lessThan": "10.0.26300.9711",
"versionType": "custom",
"status": "affected"
}
]
} Windows Server 2022 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Windows Server 2022",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.20348.0",
"lessThan": "10.0.20348.5761",
"versionType": "custom",
"status": "affected"
}
]
} Windows Server 2025 Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Windows Server 2025",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.33650",
"versionType": "custom",
"status": "affected"
}
]
} Windows Server 2025 (Server Core installation) Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Microsoft",
"product": "Windows Server 2025 (Server Core installation)",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "10.0.26100.0",
"lessThan": "10.0.26100.33650",
"versionType": "custom",
"status": "affected"
}
]
} Original source record · Cite this exact observation · Complete original publisher JSON
euvd · EUVD-2026-100459 Published EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.
Original publisher date fields datePublished: Oct 13, 2026, 7:01:45 PM
dateUpdated: Oct 31, 2026, 6:13:32 PM
2 related source bulletins · separate from aliases NCSC-2026-0423: Kwetsbaarheden verholpen in Microsoft Windows
CVE-2026-100202 · CVE-2026-100219 · CVE-2026-100222 · CVE-2026-102210 · CVE-2026-105008 · CVE-2026-21413 · CVE-2026-69634 · CVE-2026-69639 · CVE-2026-69705 · CVE-2026-69883 · CVE-2026-69886 · CVE-2026-70024 · CVE-2026-70096 · CVE-2026-70147 · CVE-2026-70153 · CVE-2026-70157 · CVE-2026-70188 · CVE-2026-83517 · CVE-2026-83519 · CVE-2026-83578 · CVE-2026-83693 · CVE-2026-83748 · CVE-2026-83770 · CVE-2026-83780 · CVE-2026-83782 · CVE-2026-83862 · CVE-2026-83869 · CVE-2026-83910 · CVE-2026-83935 · CVE-2026-84015 · CVE-2026-85792 · CVE-2026-85806 · CVE-2026-85809 · CVE-2026-85814 · CVE-2026-85818 · CVE-2026-85844 · CVE-2026-85928 · CVE-2026-88092 · CVE-2026-88102 · CVE-2026-94510 · CVE-2026-96096 · CVE-2026-96219 · CVE-2026-96252 · CVE-2026-96320 · CVE-2026-96864 · CVE-2026-96909 · CVE-2026-96924 · CVE-2026-96934 · CVE-2026-97814 · CVE-2026-97815 · CVE-2026-97816 · CVE-2026-105016
WID-SEC-W-2026-3893: Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen
CVE-2026-100205 · CVE-2026-102229 · CVE-2026-102231 · CVE-2026-102232 · CVE-2026-102233 · CVE-2026-102234 · CVE-2026-102235 · CVE-2026-102238 · CVE-2026-102851 · CVE-2026-102869 · CVE-2026-102870 · CVE-2026-103572 · CVE-2026-105016 · CVE-2026-105729 · CVE-2026-105732 · CVE-2026-108398 · CVE-2026-109468 · CVE-2026-58280 · CVE-2026-66822 · CVE-2026-69370 · CVE-2026-69651 · CVE-2026-70007 · CVE-2026-70035 · CVE-2026-70098 · CVE-2026-70159 · CVE-2026-70161 · CVE-2026-70162 · CVE-2026-70165 · CVE-2026-70174 · CVE-2026-70175 · CVE-2026-70179 · CVE-2026-70181 · CVE-2026-70183 · CVE-2026-70186 · CVE-2026-70188 · CVE-2026-70190 · CVE-2026-70194 · CVE-2026-70196 · CVE-2026-70197 · CVE-2026-83520 · CVE-2026-84008 · CVE-2026-85363 · CVE-2026-85790 · CVE-2026-87697 · CVE-2026-88092 · CVE-2026-92707 · CVE-2026-96222 · CVE-2026-96224 · CVE-2026-96225 · CVE-2026-96229 · CVE-2026-96230 · CVE-2026-96231 · CVE-2026-96232 · CVE-2026-96233 · CVE-2026-96234 · CVE-2026-96235 · CVE-2026-96236 · CVE-2026-96237 · CVE-2026-96238 · CVE-2026-96251 · CVE-2026-96303 · CVE-2026-96957 · CVE-2026-96958 · CVE-2026-96959 · CVE-2026-96960 · CVE-2026-97788 · CVE-2026-97801
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON
nvd · CVE-2026-105016 Published NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.
Source analysis status: Undergoing Analysis
Weakness classifications: CWE-122
Original publisher date fields published: 2026-10-13T19:17:57.750
lastModified: 2026-10-22T22:17:52.370
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON