CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-105016 — Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to ...

·Source: NIST NVD

Updated:

Executive Summary

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

Analysis

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network. CVSS Score: 9.8. Published: 2026-10-13T19:17:57.750.

Indicators of Compromise (1)

CVE (1)
CVE-2026-105016
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 13, 2026. Verified by: NIST.

Related Threats

CRITICALZero Day

October Patch Tuesday roundup: Over 1,400 Microsoft holes to be plugged, including three zero days

Microsoft released a record-shattering 1,407 CVEs to be plugged today on October Patch Tuesday, breaking the 2020 record of 1,261. The list was so long that its release was several hours later than the usual 1 p.m. Eastern drop time, somewhat frustrating admins. The bugs include three zero-day vulnerabilities, one of which has been exploited. The zero day being exploited, and that should be dealt

CVE-2026-96951CVE-2026-21510
CSO Online
CRITICALVulnerabilityNEW

Critical UEFI Flaw Exposes Systems to Pre-Boot Attacks

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/critical-uefi-flaw-exposes-systems-to-pre-boot-attacks-image_small-3-a-33252.jpg" align=right hspace=4><b>Attackers Can Exploit ICMP Error Handling Before Operating System Protections Load</b><br>A critical buffer overflow in TianoCore's EDK II UEFI firmware, tracked as CVE-2026-97631, could let unauthenticated attackers execute c

CVE-2026-97631
Bank Info Security
MEDIUMVulnerabilityNEW

Binance probes potential $5.8 billion crypto-theft hack

Cryptocurrency exchange Binance is investigating a potential security breach involving up to $5.8 billion in digital assets, in what could become the largest cryptocurrency hack in history. [...]

BleepingComputer