Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nuget/Microsoft.Native.Quic.MsQuic.Schannel@2.2.0
purl pkg:nuget/Microsoft.Native.Quic.MsQuic.Schannel@2.2.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-3gdg-wj5w-kqe8
Aliases:
GHSA-2x7m-gf85-3745
Remote Denial of Service Vulnerability in Microsoft QUIC ### Impact The MsQuic server will continue to leak memory until no more is available, resulting in a denial of service. ### Patches The following patch was made: - Fix Memory Leak from Multiple Decodes of TP - https://github.com/microsoft/msquic/commit/5d070d661c45979946615289e92bb6b822efe9e9 ### Workarounds Beyond upgrading to the patched versions, there is no other workaround. ### MSRC CVE Info https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26190
2.2.7
Affected by 0 other vulnerabilities.
2.3.5
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T16:04:49.723652+00:00 GHSA Importer Affected by VCID-3gdg-wj5w-kqe8 https://github.com/advisories/GHSA-2x7m-gf85-3745 38.0.0