Product
Microsoft QUIC
- First Reported
- Oct 13, 2026
- Latest Reported
- Oct 13, 2026
Reported Context (2)
- Another concerning bug that's ripe for prioritization is a heap-based buffer overflow RCE flaw in Microsoft QUIC, tracked as CVE-2026-105016 (CVSS score 9.8). It could allow an unauthenticated attacker to execute Microsoft’s October 2026 Patch Tuesday Fixes 1,413 CVEs, Including Two Zero-Days
- CVE-2026-100219 and CVE-2026-105016 in Microsoft QUIC represent exposure on any service using QUIC transport, which is increasingly common in modern web infrastructure. Microsoft’s October 2026 Patch Tuesday Fixes 1,413 Vulnerabilities, Including an Exploited Zero-Day
CVE (51)
People (5)
Vendors (1)
Products (28)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.