msquic vulnerabilities

1 known vulnerability in msquic from Microsoft. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  msquic: Improper Certificate Validation

  CVE-2026-105794Oct 6, 2026MicrosoftEPSS 1%

  MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rust. Prior to 2.4.20, 2.5.11, and 2.6.1, MsQuic clients using the OpenSSL or QuicTLS TLS backend do not properly verify that a server certificate matches the inte