CVE-2026-85790Medium· 5.9▾ SunlitUse after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 32.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
Microsoft.Native.Quic.MsQuic.Schannel >= 1.9.0, <= 2.6.1Patched in:
Microsoft.Native.Quic.MsQuic.Schannel 2.6.2Connected by shared product, vendor, weakness, or advisory.
CVE-2021-34486High· 7.8Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2026-88097High· 8.1Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.
CVE-2026-85893High· 8.8Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-70341High· 8.5Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
CVE-2026-85360High· 7.0Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83997High· 8.1Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.