Microsoft QUIC Remote Code Execution Vulnerability

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-62815 · Microsoft / collected KEV context

EUVD-2026-56392

GHSA-2q33-cf8w-7q23

GHSA-92f5-vc22-8j33

cve-program · CVE-2026-62815

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62815

euvd · EUVD-2026-56392

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62815

nvd · CVE-2026-62815

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62815

osv · GHSA-2q33-cf8w-7q23

• https://nvd.nist.gov/vuln/detail/CVE-2026-62815
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62815

osv · GHSA-92f5-vc22-8j33

• https://github.com/microsoft/msquic/security/advisories/GHSA-92f5-vc22-8j33
• https://nvd.nist.gov/vuln/detail/CVE-2026-62815
• https://github.com/microsoft/msquic/pull/6217
• https://github.com/microsoft/msquic/pull/6219
• https://github.com/microsoft/msquic/pull/6220
• https://github.com/microsoft/msquic/commit/583e7d5b509bb0bfa3518482d98879b6eda41ad0
• https://github.com/microsoft/msquic/commit/9ff06b71fd4b4d5258361598ada5b24cbc1beb20
• https://github.com/microsoft/msquic/commit/e0f55b5fdc9fff0b4465976d066ebd22fb7e2b3b
• https://github.com/microsoft/msquic
• https://github.com/microsoft/msquic/releases/tag/v2.4.19
• https://github.com/microsoft/msquic/releases/tag/v2.5.10
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62815

No related operational record is retained in the current change model.