CVE-2026-100219
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk62th percentile - higher than 62% of all known CVEs
Summary
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute code, potentially leading to system compromise or data breach.
Recommendation
Apply available security updates from Microsoft for the QUIC component.
Other vulnerabilities in Microsoft QUIC
See all- CVE-2026-105016Critical
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
- CVE-2026-62815Critical
A use-after-free vulnerability in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
- CVE-2026-85790Medium
A use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
- CVE-2026-103577High
Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-62898High
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
Original NVD description (English source)
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS