Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-85790

Fixed upstream EPSS <1%CVSS 5.9

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

Published 2026-10-13 · CVE record · OSV

Products: Microsoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.10, Microsoft.Native.Quic.MsQuic.Schannel, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation)

Fixed upstream

EcosystemPackageFixed in
NuGetMicrosoft.Native.Quic.MsQuic.Schannel2.5.12
NuGetMicrosoft.Native.Quic.MsQuic.Schannel2.6.3

Distro releases

ReleasePackageFixed in
Ubuntu 22.04 LTSdotnet7no fix