CVE-2024-26190

Name of the Vulnerable Software and Affected Versions Windows versions prior to the fixed version

Description The issue is related to the implementation of the QUIC network protocol in Windows operating systems, specifically due to insufficient input validation. This can be exploited by a remote attacker to cause a denial of service using specially crafted data. The MsQuic server will continue to leak memory until no more is available, resulting in a denial of service.

Recommendations For Windows versions prior to the fixed version, upgrade to the patched version to fix the memory leak issue. As a temporary workaround, consider restricting access to the MsQuic server to minimize the risk of exploitation. Beyond upgrading to the patched versions, there are no other workarounds available.