VDB

CVE-2026-85790

CVE-2026-85790 PUBLISHED CVSS 5.900000095367432 MEDIUM

Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.Native.Quic.MsQuic.Schannel. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Various vulnerabilities in MsQuic are addressed by an updated native-binary dependency update.

EPSS 0.80% · 56.6th percentile

Risk Scores

CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.80%
56.6th percentile

Affected Products

VendorProductVersions
microsoftwindows_11_26H110.0.28000.0
MicrosoftWindows 11 Version 24H210.0.26100.0
microsoftwindows_11_25H210.0.26200.0
microsoftwindows_server_202510.0.26100.0
microsoftvisual_studio_202217.14.0
MicrosoftWindows 11 version 23H210.0.22631.0
MicrosoftWindows 11 version 26H110.0.28000.0
microsoftwindows_11_24H210.0.26100.0
MicrosoftWindows Server 202210.0.20348.0
MicrosoftMicrosoft.Native.Quic.MsQuic.Schannel1.9.0
alpinedotnet8-runtime0
NuGetMicrosoft.Native.Quic.MsQuic.Schannel2.6.0, 1.9.0
MicrosoftWindows Server 202510.0.26100.0
MicrosoftWindows 11 Version 23H210.0.22631.0
alpinedotnet9-runtime0
microsoftwindows_server_202210.0.20348.0
microsoftwindows_11_version_26h2_for_arm64-based_systems10.0.26300.0
MicrosoftWindows 11 Version 25H210.0.26200.0
microsoftmicrosoft.native.quic.msquic.schannel1.9.0
microsoftwindows_11_23H210.0.22631.0

…and 6 more

Timeline

  • Oct 13, 2026 CVE Published
  • Oct 14, 2026 EPSS Score
  • Oct 14, 2026 Coalition ESS Score
  • Oct 16, 2026 EPSS Score
  • Oct 17, 2026 EPSS Score
  • Oct 19, 2026 CVE Updated
  • Oct 20, 2026 EPSS Score
  • Oct 21, 2026 EPSS Score
  • Oct 24, 2026 EPSS Score
  • Oct 25, 2026 EPSS Score
  • Oct 27, 2026 Security Advisory
  • Oct 29, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›