Microsoft.Native.Quic.MsQuic.Schannel
NuGet6 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting Microsoft.Native.Quic.MsQuic.Schannelpage 1 of 1
- CVE-2023-36435HIGHCVSS 7.5EG 7.5fixed in 2.2.32023-10-10
vulnerable: 1.8.0
Microsoft QUIC Denial of Service Vulnerability
- CVE-2023-38171HIGHCVSS 7.5EG 8.6fixed in 2.2.32023-10-10
vulnerable: 1.8.0
Microsoft QUIC Denial of Service Vulnerability
- CVE-2026-105016CRITICALCVSS 9.8EG 9.8fixed in 2.5.11-ci.1594170532026-10-13
vulnerable: 2.5.11-ci.156755675
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
- CVE-2026-32179CRITICALCVSS 9.8EG 9.8fixed in 2.5.7 or 2.4.18, by version range2026-04-16
vulnerable: 1.8.0
MsQuic has a Remote Elevation of Privilege Vulnerability ### Summary Improper input validation in Microsoft QUIC allows an unauthorized attacker to elevate privileges over a network. ### Details Improper Input Validation Integer Underfl…
- CVE-2026-62815CRITICALCVSS 9.8EG 9.8fixed in 2.5.10 or 2.4.19, by version range2026-08-11
vulnerable: 1.8.0
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
- CVE-2026-85790MEDIUMCVSS 5.9EG 5.9fixed in 2.5.12 or 2.6.3, by version range2026-10-13
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
Check whether Microsoft.Native.Quic.MsQuic.Schannel is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for Microsoft.Native.Quic.MsQuic.Schannel CVEs against the assets you own.
Book a Demo →