crítica
CVE-2026-105016
Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
GHSA9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según GHSA.
Descripción
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| nuget::GitHub Security Advisory NuGet | Microsoft.Native.Quic.MsQuic.Schannel, microsoft.native.quic.msquic.schannel | 2.5.11-ci.159417053 |
| alpine 3.22 | dotnet8-runtime, dotnet9-runtime | 8.0.32-r0 y 1 más |
| alpine 3.23 | dotnet10-runtime, dotnet8-runtime, dotnet9-runtime | 10.0.13-r0 y 2 más |
| alpine 3.24 | dotnet10-runtime, dotnet8-runtime, dotnet9-runtime | 10.0.13-r0 y 2 más |
| alpine edge | dotnet10-runtime, dotnet8-runtime, dotnet9-runtime | 10.0.13-r0 y 2 más |
| rapidfort fedora 43 | dotnet-sdk-10.0, dotnet-sdk-10.0-source-built-artifacts, dotnet-sdk-8.0 y 15 más | 10.0.113-1.fc43 y 2 más |
Mostrar las 31 entradas de 6 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| nuget::GitHub Security Advisory NuGet | Microsoft.Native.Quic.MsQuic.Schannel | 2.5.11-ci.159417053 |
| nuget::GitHub Security Advisory NuGet | microsoft.native.quic.msquic.schannel | 2.5.11-ci.159417053 |
| alpine 3.22 | dotnet8-runtime | 8.0.32-r0 |
| alpine 3.22 | dotnet9-runtime | 9.0.21-r0 |
| alpine 3.23 | dotnet10-runtime | 10.0.13-r0 |
| alpine 3.23 | dotnet8-runtime | 8.0.32-r0 |
| alpine 3.23 | dotnet9-runtime | 9.0.21-r0 |
| alpine 3.24 | dotnet10-runtime | 10.0.13-r0 |
| alpine 3.24 | dotnet8-runtime | 8.0.32-r0 |
| alpine 3.24 | dotnet9-runtime | 9.0.21-r0 |
| alpine edge | dotnet10-runtime | 10.0.13-r0 |
| alpine edge | dotnet8-runtime | 8.0.32-r0 |
| alpine edge | dotnet9-runtime | 9.0.21-r0 |
| rapidfort fedora 43 | dotnet-sdk-10.0 | 10.0.113-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-10.0-source-built-artifacts | 10.0.113-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-8.0 | 8.0.132-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-8.0-source-built-artifacts | 8.0.132-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-9.0 | 9.0.122-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-9.0-source-built-artifacts | 9.0.122-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-aot-10.0 | 10.0.113-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-aot-9.0 | 9.0.122-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-dbg-10.0 | 10.0.113-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-dbg-8.0 | 8.0.132-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-dbg-9.0 | 9.0.122-1.fc43 |
| rapidfort fedora 43 | dotnet-templates-10.0 | 10.0.113-1.fc43 |
| rapidfort fedora 43 | dotnet-templates-8.0 | 8.0.132-1.fc43 |
| rapidfort fedora 43 | dotnet-templates-9.0 | 9.0.122-1.fc43 |
| rapidfort fedora 43 | dotnet10.0 | 10.0.113-1.fc43 |
| rapidfort fedora 43 | dotnet8.0 | 8.0.132-1.fc43 |
| rapidfort fedora 43 | dotnet9.0 | 9.0.122-1.fc43 |
| rapidfort fedora 43 | netstandard-targeting-pack-2.1 | 9.0.122-1.fc43 |