Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-62898

Fixed upstream EPSS 1%CVSS 7.5

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

Published 2026-08-11 · CVE record · OSV

Products: Microsoft .NET 10.0, Microsoft .NET 8.0, Microsoft .NET 9.0, Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.8

Fixed upstream

EcosystemPackageFixed in
NuGetMicrosoft.NETCore.App.Runtime.win-arm6410.0.11
NuGetMicrosoft.NETCore.App.Runtime.win-arm649.0.19
NuGetMicrosoft.NETCore.App.Runtime.win-arm648.0.30
NuGetMicrosoft.NETCore.App.Runtime.win-x6410.0.11
NuGetMicrosoft.NETCore.App.Runtime.win-x649.0.19
NuGetMicrosoft.NETCore.App.Runtime.win-x648.0.30
NuGetMicrosoft.NETCore.App.Runtime.win-x8610.0.11
NuGetMicrosoft.NETCore.App.Runtime.win-x869.0.19
NuGetMicrosoft.NETCore.App.Runtime.win-x868.0.30

Distro releases

ReleasePackageFixed in
Ubuntu 22.04 LTSdotnet7no fix