CVE-2024-26190

CWE-400 — Uncontrolled Resource ConsumptionCWE-401 — Memory Leak3 documents3 sources
Severity
7.5HIGH
No vector
EPSS
0.8%
top 25.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
13
Microsoft .net 7.0Microsoft .net 8.0Microsoft Microsoft Visual Studio 2022 Version 17.4+10 more
Timeline
PublishedMar 12
Latest updateMar 13

Description

Microsoft QUIC Denial of Service Vulnerability Microsoft QUIC Denial of Service Vulnerability

Affected Packages13 packages

▶CVEListV5microsoft/.net_7.07.0.0 — 7.0.17
▶CVEListV5microsoft/.net_8.08.0 — 8.0.3
▶CVEListV5microsoft/powershell_7.37.3.0 — 7.3.12
▶CVEListV5microsoft/powershell_7.47.4.0 — 7.4.2
▶CVEListV5microsoft/windows_server_202210.0.20348.0 — 10.0.20348.2340

🔴Vulnerability Details

2
GHSA
Remote Denial of Service Vulnerability in Microsoft QUIC↗2024-03-13
▶
CVEList
Microsoft QUIC Denial of Service Vulnerability↗2024-03-12
▶

📋Vendor Advisories

1
Microsoft
Microsoft QUIC Denial of Service Vulnerability↗2024-03-12
▶
CVE-2024-26190 (HIGH CVSS 7.5) | Microsoft QUIC Denial of Service Vu | cvebase.io