p PatchFirst

CVE-2026-85790

CVE-2026-85790 · Microsoft QUIC Information Disclosure Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

CVSS 5.9 · Medium · EPSS 0.8% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • microsoft visual studio 2022 version 17.14

    Versions
    • ≥ 17.14.0, < 17.14.42: Affected (custom)

    Update to 17.14.42

  • microsoft visual studio 2026 version 18.10

    Versions
    • ≥ 18.10.0, < 18.10.4: Affected (custom)

    Update to 18.10.4

  • microsoft.native.quic.msquic.schannel

    Versions
    • ≥ 1.9.0, < 2.6.2: Affected (custom)

    Update to 2.6.2

  • windows 11 version 23h2

    Versions
    • ≥ 10.0.22631.0, < 10.0.22631.7652: Affected (custom)

    Update to 10.0.22631.7652

  • windows 11 version 24h2

    Versions
    • ≥ 10.0.26100.0, < 10.0.26100.9711: Affected (custom)

    Update to 10.0.26100.9711

  • windows 11 version 25h2

    Versions
    • ≥ 10.0.26200.0, < 10.0.26200.9711: Affected (custom)

    Update to 10.0.26200.9711

  • windows 11 version 26h1

    Versions
    • ≥ 10.0.28000.0, < 10.0.28000.3231: Affected (custom)

    Update to 10.0.28000.3231

  • windows 11 version 26h2

    Versions
    • ≥ 10.0.26300.0, < 10.0.26300.9711: Affected (custom)

    Update to 10.0.26300.9711

  • windows server 2022

    Versions
    • ≥ 10.0.20348.0, < 10.0.20348.5761: Affected (custom)

    Update to 10.0.20348.5761

  • windows server 2025

    Versions
    • ≥ 10.0.26100.0, < 10.0.26100.33650: Affected (custom)

    Update to 10.0.26100.33650

  • windows server 2025 (server core installation)

    Versions
    • ≥ 10.0.26100.0, < 10.0.26100.33650: Affected (custom)

    Update to 10.0.26100.33650

  • dotnet7 Ubuntu:22.04:LTS

    Versions
    • 7.0.105-0ubuntu1~22.04.1
    • 7.0.107-0ubuntu1~22.04.1
    • 7.0.108-0ubuntu1~22.04.1
    • 7.0.109-0ubuntu1~22.04.1
    • 7.0.110-0ubuntu1~22.04.1
    • 7.0.111-0ubuntu1~22.04.1
    • 7.0.112-0ubuntu1~22.04.1
    • 7.0.113-0ubuntu1~22.04.1
    • 7.0.114-0ubuntu1~22.04.1
    • 7.0.115-0ubuntu1~22.04.1
    • 7.0.116-0ubuntu1~22.04.1
    • 7.0.117-0ubuntu1~22.04.1
    • 7.0.117-0ubuntu1~22.04.2
    • 7.0.119-0ubuntu1~22.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →