CVE-2026-62898 Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network

Description

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
.NET 10.0 10.0	10.0.0 → < 10.0.11	10.0.11
.NET 8.0 8.0	8.0.0 → < 8.0.30	8.0.30
.NET 9.0 9.0	9.0.0 → < 9.0.19	9.0.19
Microsoft Visual Studio 2022 version 17.14 17.14	17.14.0 → < 17.14.38	17.14.38
Microsoft Visual Studio 2026 version 18.8 18.0	18.0 → < 18.8.3	18.8.3
.NET 10.0 runtime 10.0	10.0.0 → < 10.0.11	10.0.11
.NET 8.0 runtime 8.0	8.0.0 → < 8.0.30	8.0.30
.NET 9.0 runtime 9.0	9.0.0 → < 9.0.19	9.0.19

Autres CVE de .NET 10.0

Les 70 CVE de .NET 10.0 →

CVE-2026-105016 Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network 9.8 Critique CVE-2026-58280 Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network 7.5 Élevée CVE-2026-96957 Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature… 8.8 Élevée CVE-2026-96233 Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network 7.5 Élevée