CVE-2024-26190: Microsoft QUIC Denial of Service Vulnerability
Published Mar 12, 2024
·Updated
Microsoft QUIC Denial of Service Vulnerability
Affected Software
28 affected componentsFixes available
Microsoft .NET 7.0
Microsoft .NET 8.0
Microsoft Windows Server 2022, 23H2 Edition
Microsoft PowerShell 7.3
Microsoft PowerShell 7.4
Microsoft Windows 11=23H2
Microsoft Windows 11=22H2
Microsoft Windows 11=22H2
Microsoft Windows 11=21H2
Microsoft Windows 11=21H2
Microsoft Windows 11=23H2
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Visual Studio 2022=17.4
Microsoft Visual Studio 2022=17.9
Microsoft .NET>=7.0.0<7.0.17
Microsoft .NET>=8.0.0<8.0.3
Microsoft PowerShell>=7.3<7.3.12
Microsoft PowerShell>=7.4<7.4.2
Microsoft Visual Studio 2022>=17.4.0<17.4.17
Microsoft Visual Studio 2022>=17.6.0<17.6.13
Microsoft Visual Studio 2022>=17.8.0<17.8.8
Microsoft Visual Studio 2022>=17.9.0<17.9.3
Microsoft Windows 11 21h2<10.0.22000.2836
Microsoft Windows 11 22h2<10.0.22621.3296
Microsoft Windows 11 23h2<10.0.22631.3296
Microsoft Windows Server 2022<10.0.20348.2340
Microsoft Windows Server 2022 23h2<10.0.25398.763
Event History
Mar 12, 2024
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·04:57 PM
Data Sourced
via MITRE·04:57 PM
DescriptionSeverity
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-26190?
CVE-2024-26190 has been classified as a denial of service vulnerability.
2
How do I fix CVE-2024-26190?
To fix CVE-2024-26190, ensure that your affected Microsoft products are updated with the latest patches.
3
Which Microsoft products are affected by CVE-2024-26190?
CVE-2024-26190 affects Microsoft Windows Server 2022, Windows 11, and Visual Studio 2022 among others.
4
Is there a workaround for CVE-2024-26190?
Currently, the best recommendation is to apply the available updates to mitigate CVE-2024-26190.
5
What type of attack does CVE-2024-26190 enable?
CVE-2024-26190 enables a denial of service attack that can disrupt service availability.