kritik
CVE-2026-105016
Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
GHSA9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: GHSA.
Açıklama
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| nuget::GitHub Security Advisory NuGet | Microsoft.Native.Quic.MsQuic.Schannel, microsoft.native.quic.msquic.schannel | 2.5.11-ci.159417053 |
| alpine 3.22 | dotnet8-runtime, dotnet9-runtime | 8.0.32-r0 ve 1 tane daha |
| alpine 3.23 | dotnet10-runtime, dotnet8-runtime, dotnet9-runtime | 10.0.13-r0 ve 2 tane daha |
| alpine 3.24 | dotnet10-runtime, dotnet8-runtime, dotnet9-runtime | 10.0.13-r0 ve 2 tane daha |
| alpine edge | dotnet10-runtime, dotnet8-runtime, dotnet9-runtime | 10.0.13-r0 ve 2 tane daha |
| rapidfort fedora 43 | dotnet-sdk-10.0, dotnet-sdk-10.0-source-built-artifacts, dotnet-sdk-8.0 ve 15 tane daha | 10.0.113-1.fc43 ve 2 tane daha |
6 kaynaktaki 31 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| nuget::GitHub Security Advisory NuGet | Microsoft.Native.Quic.MsQuic.Schannel | 2.5.11-ci.159417053 |
| nuget::GitHub Security Advisory NuGet | microsoft.native.quic.msquic.schannel | 2.5.11-ci.159417053 |
| alpine 3.22 | dotnet8-runtime | 8.0.32-r0 |
| alpine 3.22 | dotnet9-runtime | 9.0.21-r0 |
| alpine 3.23 | dotnet10-runtime | 10.0.13-r0 |
| alpine 3.23 | dotnet8-runtime | 8.0.32-r0 |
| alpine 3.23 | dotnet9-runtime | 9.0.21-r0 |
| alpine 3.24 | dotnet10-runtime | 10.0.13-r0 |
| alpine 3.24 | dotnet8-runtime | 8.0.32-r0 |
| alpine 3.24 | dotnet9-runtime | 9.0.21-r0 |
| alpine edge | dotnet10-runtime | 10.0.13-r0 |
| alpine edge | dotnet8-runtime | 8.0.32-r0 |
| alpine edge | dotnet9-runtime | 9.0.21-r0 |
| rapidfort fedora 43 | dotnet-sdk-10.0 | 10.0.113-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-10.0-source-built-artifacts | 10.0.113-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-8.0 | 8.0.132-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-8.0-source-built-artifacts | 8.0.132-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-9.0 | 9.0.122-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-9.0-source-built-artifacts | 9.0.122-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-aot-10.0 | 10.0.113-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-aot-9.0 | 9.0.122-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-dbg-10.0 | 10.0.113-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-dbg-8.0 | 8.0.132-1.fc43 |
| rapidfort fedora 43 | dotnet-sdk-dbg-9.0 | 9.0.122-1.fc43 |
| rapidfort fedora 43 | dotnet-templates-10.0 | 10.0.113-1.fc43 |
| rapidfort fedora 43 | dotnet-templates-8.0 | 8.0.132-1.fc43 |
| rapidfort fedora 43 | dotnet-templates-9.0 | 9.0.122-1.fc43 |
| rapidfort fedora 43 | dotnet10.0 | 10.0.113-1.fc43 |
| rapidfort fedora 43 | dotnet8.0 | 8.0.132-1.fc43 |
| rapidfort fedora 43 | dotnet9.0 | 9.0.122-1.fc43 |
| rapidfort fedora 43 | netstandard-targeting-pack-2.1 | 9.0.122-1.fc43 |