PT-2026-112758 · Microsoft · Microsoft.Native.Quic.Msquic.Schannel+1

CVE-2026-85790

·

Published

2026-10-13

·

Updated

2026-10-14

CVSS v3.1

5.9

Medium

VectorAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Microsoft.Native.Quic.MsQuic.Schannel versions 1.9.0 through 2.6.1
Description A use after free issue in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. Use after free is a condition where a program continues to use a pointer after it has been freed, which can lead to memory corruption or information leakage.
Recommendations Update Microsoft.Native.Quic.MsQuic.Schannel to version 2.6.2. Install the latest version of .NET. Recompile and redeploy any self-contained applications targeting versions 1.9.0 through 2.6.1.

Fix

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-85790
GHSA-2MXG-PRVG-9JFG

Affected Products

.Net Framework
Microsoft.Native.Quic.Msquic.Schannel