Microsoft QUIC Remote Code Execution Vulnerability

Summary

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

Remediation

1. Inventory every Microsoft .NET 10.0 runtime deployment, including staging.
2. Upgrade Microsoft .NET 10.0 runtime to the fixed version for your release line, listed under Affected versions.
3. Confirm the running version after the upgrade.

References

• Patchhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105016