Microsoft QUIC: Remote Code Execution Vulnerability
# Summary Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. # Details New network path creations and removals triggered by incoming packets can lead to a pointer invalidation. ## Patches - Guard path promotion [e0f55b5](https://github.com/microsoft/msquic/commit/e0f55b5fdc9fff0b4465976d066ebd22fb7e2b3b) # Impact An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-62815US | — | — | ||
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/microsoft/msquicPACKAGE
- https://github.com/microsoft/msquic/commit/583e7d5b509bb0bfa3518482d98879b6eda41ad0WEB
- https://github.com/microsoft/msquic/commit/9ff06b71fd4b4d5258361598ada5b24cbc1beb20WEB
- https://github.com/microsoft/msquic/commit/e0f55b5fdc9fff0b4465976d066ebd22fb7e2b3bWEB
- https://github.com/microsoft/msquic/pull/6217WEB
- https://github.com/microsoft/msquic/pull/6219WEB
- https://github.com/microsoft/msquic/pull/6220WEB
- https://github.com/microsoft/msquic/releases/tag/v2.4.19WEB
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan