CVE-2026-100219

Name of the Vulnerable Software and Affected Versions Microsoft QUIC versions Windows 11 23H2 through 26H2 Microsoft QUIC versions Windows Server 2022 through 2025

Description A use-after-free issue in Microsoft QUIC allows an unauthorized attacker to execute code over a network. This occurs when affected systems process attacker-controlled QUIC traffic through a reachable vulnerable service. Use-after-free is a memory corruption flaw that happens when an application continues to use a pointer after it has been freed.

Recommendations Apply Microsoft security updates released on October 13 for Windows 11 23H2 through 26H2. Apply Microsoft security updates released on October 13 for Windows Server 2022 through 2025. Restrict unnecessary network exposure to minimize the risk of exploitation.