Microsoft.Native.Quic.MsQuic.OpenSSL vulnerabilities
CVEs whose affected-version data names the Microsoft.Native.Quic.MsQuic.OpenSSL package (nuget). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-105794Critical· 9.1MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rust
MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rust. Prior to 2.4.20, 2.5.11, and 2.6.1, MsQuic clients using the OpenSSL or QuicTLS TLS backend do not properly verify that a server certi…
▾ MidnightMicrosoft · Microsoft.Native.Quic.MsQuic.OpenSSLEPSS 1.0%via NVD
GHSA-2q33-cf8w-7q23Critical· 9.8Duplicate Advisory: Microsoft QUIC Remote Code Execution Vulnerability
Duplicate Advisory: Microsoft QUIC Remote Code Execution Vulnerability
▾ MidnightMicrosoft · Microsoft.Native.Quic.MsQuic.OpenSSLvia GHSA