Description
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft .NET 10.0 runtime
10.0.0 to < 10.0.14affected
Microsoft .NET 11.0 runtime
11.0.0 to < 11.0.0-rc.2.26504.105affected
Microsoft .NET 8.0 runtime
8.0.0 to < 8.0.32affected
Microsoft .NET 9.0 runtime
9.0.0 to < 9.0.21affected
Microsoft Microsoft Visual Studio 2022 version 17.14
17.14.0 to < 17.14.42affected
Microsoft Microsoft Visual Studio 2026 version 18.10
18.10.0 to < 18.10.4affected
Microsoft Windows 11 version 23H2
10.0.22631.0 to < 10.0.22631.7652affected
Microsoft Windows 11 Version 23H2
10.0.22631.0 to < 10.0.22631.7652affected
Microsoft Windows 11 Version 24H2
10.0.26100.0 to < 10.0.26100.9711affected
Microsoft Windows 11 Version 25H2
10.0.26200.0 to < 10.0.26200.9711affected
Microsoft Windows 11 version 26H1
10.0.28000.0 to < 10.0.28000.3231affected
Microsoft Windows 11 Version 26H2
10.0.26300.0 to < 10.0.26300.9711affected
Microsoft Windows Server 2022
10.0.20348.0 to < 10.0.20348.5761affected
Microsoft Windows Server 2025
10.0.26100.0 to < 10.0.26100.33650affected
Microsoft Windows Server 2025 (Server Core installation)
10.0.26100.0 to < 10.0.26100.33650affected