---
id: "CVE-2026-105512"
page: "https://infrastack.ai/live/CVE-2026-105512"
kind: "vulnerability"
aliases: ["CVE-2026-105512"]
title: "Microsoft QUIC: integer underflow lets a network attacker crash service"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Microsoft QUIC", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["infrastructure", "microsoft-quic", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:17:50+00:00"
first_seen_at: "2026-11-10T19:24:17+00:00"
updated_at: "2026-11-10T19:47:32+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105512", "first_seen_at": "2026-11-10T19:24:17+00:00"}]
exploit_sources: []
---

# Microsoft QUIC: integer underflow lets a network attacker crash service

Link for people: https://infrastack.ai/live/CVE-2026-105512 (this .md is for agents)

Microsoft QUIC, the transport layer used by Windows networking and related services, has an integer underflow bug. An unauthenticated attacker over the network can cause a denial of service.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Microsoft QUIC affected range not listed fixed no fixed version listed

## Timeline

- 2026-11-10T19:24:17+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-105512

## From the sources

Integer underflow (wrap or wraparound) in Microsoft QUIC allows an unauthorized attacker to deny service over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_