{
  "schemaVersion": 1,
  "incident": {
    "id": "cve-2026-105016",
    "url": "https://cveboard.org/i/cve-2026-105016",
    "urlPt": "https://cveboard.org/pt/i/cve-2026-105016",
    "json": "https://cveboard.org/i/cve-2026-105016.json",
    "kind": "vuln",
    "live": true,
    "knownExploited": false,
    "severity": "critical",
    "title": "Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability",
    "summary": "Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft QUIC as used by .NET 8.0, .NET 9.0, .NET 10.0, and .NET 11 RC2 on Windows. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.",
    "titlePt": "Aviso de Segurança da Microsoft CVE-2026-105016 - Vulnerabilidade de Execução Remota de Código no Microsoft QUIC",
    "summaryPt": "A Microsoft está divulgando este aviso de segurança para fornecer informações sobre uma vulnerabilidade no Microsoft QUIC conforme usado pelo .NET 8.0, .NET 9.0, .NET 10.0 e .NET 11 RC2 no Windows. Este aviso também fornece orientações sobre o que os desenvolvedores podem fazer para atualizar seus aplicativos e remover esta vulnerabilidade.",
    "cves": [
      "CVE-2026-105016"
    ],
    "ghsa": "GHSA-5gjq-3f94-rcf7",
    "cvss": {
      "score": 9.8,
      "version": "3.1"
    },
    "epss": {
      "percentage": 0.00986,
      "percentile": 0.6161,
      "asOf": "2026-10-23"
    },
    "packages": [
      {
        "ecosystem": "nuget",
        "name": "Microsoft.Native.Quic.MsQuic.Schannel",
        "vulnerable": "= 2.5.11-ci.156755675",
        "fixed": "2.5.11-ci.159417053",
        "advisory": "GHSA-5gjq-3f94-rcf7"
      }
    ],
    "vendor": null,
    "product": null,
    "kev": null,
    "breach": null,
    "retracted": false,
    "sources": [
      {
        "label": "GitHub Advisory Database",
        "url": "https://github.com/advisories/GHSA-5gjq-3f94-rcf7"
      }
    ],
    "publishedAt": "2026-10-13T19:56:35.000Z",
    "updatedAt": "2026-10-13T19:56:35.000Z"
  },
  "live": true,
  "events": [
    {
      "id": "ghsa:GHSA-5gjq-3f94-rcf7:ghsa_published:2026-10-13T19:56:35.000Z",
      "incidentId": "cve-2026-105016",
      "type": "ghsa_published",
      "at": "2026-10-13T19:56:35.000Z",
      "detail": {
        "ghsa": "GHSA-5gjq-3f94-rcf7",
        "severity": "critical",
        "fixed": "2.5.11-ci.159417053"
      }
    }
  ]
}