Microsoft QUIC Remote Code Execution Vulnerability

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products20

• .NET 10.0 installed on Windows
• .NET 11.0 installed on Windows
• .NET 8.0 installed on Windows
• .NET 9.0 installed on Windows
• Microsoft Visual Studio 2022 version 17.14
• Microsoft Visual Studio 2026 version 18.10
• Windows 11 Version 23H2 for ARM64-based Systems
• Windows 11 Version 23H2 for x64-based Systems
• Windows 11 Version 24H2 for ARM64-based Systems
• Windows 11 Version 24H2 for x64-based Systems
• Windows 11 Version 25H2 for ARM64-based Systems
• Windows 11 Version 25H2 for x64-based Systems
• Windows 11 Version 26H1 for ARM64-based Systems
• Windows 11 Version 26H2 for ARM64-based Systems
• Windows 11 Version 26H2 for x64-based Systems
• Windows 11 version 26H1 for x64-based Systems
• Windows Server 2022
• Windows Server 2022 (Server Core installation)
• Windows Server 2025
• Windows Server 2025 (Server Core installation)

✅ Remediation

KB5126655 (Security Update) — fixed build 10.0.20348.5761 KB5126653 (Security Update) — fixed build 10.0.22631.7652 KB5127648 (Security Update) — fixed build 10.0.26100.9711 KB5127648 (Security Update) — fixed build 10.0.26200.9711 KB5127648 (Security Update) — fixed build 10.0.26300.9711 KB5126646 (Security Update) — fixed build 10.0.26100.33650 KB5127646 (Security Update) — fixed build 10.0.28000.3231 KBRelease Notes (Security Update) — fixed build 18.10.4 KBRelease Notes (Security Update) — fixed build 17.14.42 KB5130034 (Security Update) — fixed build 8.0.32 KB5130035 (Security Update) — fixed build 9.0.21 KBRelease Notes (Security Update) — fixed build 10.0.14 KBRelease Notes (Security Update) — fixed build 11.0.0-rc.2.26504.105

🔗 References (22)

• advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105016
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655
• referencehttps://support.microsoft.com/help/5126655
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653
• referencehttps://support.microsoft.com/help/5126653
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648
• referencehttps://support.microsoft.com/help/5127648
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646
• referencehttps://support.microsoft.com/help/5126646
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646
• referencehttps://support.microsoft.com/help/5127646
• patchhttps://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history
• referencehttps://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes
• patchhttps://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history
• referencehttps://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
• patchhttps://dotnet.microsoft.com/download/dotnet/8.0
• referencehttps://support.microsoft.com/help/5130034
• patchhttps://dotnet.microsoft.com/download/dotnet/9.0
• referencehttps://support.microsoft.com/help/5130035
• patchhttps://dotnet.microsoft.com/download/dotnet/10.0
• referencehttps://github.com/dotnet/announcements/issues/446
• patchhttps://dotnet.microsoft.com/download/dotnet/11.0