{"metadata": {"vulnerability": "cve-2026-105016", "count": 47, "kinds": {"milestone": 11, "sighting": 19, "kev": 0, "other": 17}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0423", "record": "NCSC-2026-0423", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-02T20:51:38.831Z", "date_only": false, "value": "2026-10-02T20:51:38.831Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-105016", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1313", "record": "CERTFR-2026-AVI-1313", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1314", "record": "CERTFR-2026-AVI-1314", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-13T11:49:46Z", "date_only": false, "value": "2026-10-13T11:49:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0423", "record": "CVE-2026-105016", "field": "creation_timestamp", "uuid": "8bc682bb-c1bd-4188-a0ad-a09740f95306", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0423"}, {"timestamp": "2026-10-13T14:00:00Z", "date_only": false, "value": "2026-10-13T14:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "cve-2026-105016", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-13T18:49:46.031Z", "date_only": false, "value": "2026-10-13T18:49:46.031797Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0423", "record": "NCSC-2026-0423", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T18:49:46.031Z", "date_only": false, "value": "2026-10-13T18:49:46.031797Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0423", "record": "NCSC-2026-0423", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T18:49:46.031Z", "date_only": false, "value": "2026-10-13T18:49:46.031797Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0423", "record": "NCSC-2026-0423", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T19:01:45.693Z", "date_only": false, "value": "2026-10-13T19:01:45.693Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-105016", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T19:07:48.665Z", "date_only": false, "value": "2026-10-13T19:07:48.665385Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5t3ijs2m", "record": "CVE-2026-105016", "field": "creation_timestamp", "uuid": "7f974629-140a-4818-be2f-54114c04ef28", "content": "CVE-2026-105016 MSQuic RCE CVSS 9.8\n\nThat's a nice high score. However it's a high score because Windows runs their MSQuic copy in the kernel. An unauthenticated Kernel RCE is a big deal. We inherit that CVSS score. If it was just .NET it'd maybe be a 9.2\n\nSo, don't panic too hard over this.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5t3ijs2m"}, {"timestamp": "2026-10-13T19:07:51.386Z", "date_only": false, "value": "2026-10-13T19:07:51.386130Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5t3mgs2m", "record": "CVE-2026-105016", "field": "creation_timestamp", "uuid": "3e98b6b5-4ab5-4f99-a740-fe46bf2d0143", "content": "CVE-2026-105016 MSQuic RCE CVSS 9.8\n\nThat's a nice high score. However it's a high score because Windows runs their MSQuic copy in the kernel. An unauthenticated Kernel RCE is a big deal. We inherit that CVSS score. If it was just .NET it'd maybe be a 9.2\n\nSo, don't panic too hard over this.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5t3mgs2m"}, {"timestamp": "2026-10-13T19:07:54.245Z", "date_only": false, "value": "2026-10-13T19:07:54.245409Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5tnth22m", "record": "CVE-2026-105016", "field": "creation_timestamp", "uuid": "dea3a520-e56d-4c52-8813-b18198529760", "content": "CVE-2026-105016 MSQuic RCE CVSS 9.8\n\nThat's a nice high score. However it's a high score because Windows runs their MSQuic copy in the kernel. An unauthenticated Kernel RCE is a big deal. We inherit that CVSS score. If it was just .NET it'd maybe be a 9.2\n\nSo, don't panic too hard over this.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5tnth22m"}, {"timestamp": "2026-10-13T19:07:56.972Z", "date_only": false, "value": "2026-10-13T19:07:56.972734Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5u4uvc2m", "record": "CVE-2026-105016", "field": "creation_timestamp", "uuid": "8bf8ee44-678a-4725-a8ef-bbf4a5aedbd4", "content": "CVE-2026-105016 MSQuic RCE CVSS 9.8\n\nThat's a nice high score. However it's a high score because Windows runs their MSQuic copy in the kernel. An unauthenticated Kernel RCE is a big deal. We inherit that CVSS score. If it was just .NET it'd maybe be a 9.2\n\nSo, don't panic too hard over this.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5u4uvc2m"}, {"timestamp": "2026-10-13T19:07:59.547Z", "date_only": false, "value": "2026-10-13T19:07:59.547519Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5uh32s2m", "record": "CVE-2026-105016", "field": "creation_timestamp", "uuid": "b9590c00-e926-4833-8e72-55ef756599d3", "content": "CVE-2026-105016 MSQuic RCE CVSS 9.8\n\nThat's a nice high score. However it's a high score because Windows runs their MSQuic copy in the kernel. An unauthenticated Kernel RCE is a big deal. We inherit that CVSS score. If it was just .NET it'd maybe be a 9.2\n\nSo, don't panic too hard over this.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5uh32s2m"}, {"timestamp": "2026-10-13T19:08:02.527Z", "date_only": false, "value": "2026-10-13T19:08:02.527814Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5upqfs2m", "record": "CVE-2026-105016", "field": "creation_timestamp", "uuid": "12b1fbb6-e056-494c-baa7-2745b0df6412", "content": "CVE-2026-105016 MSQuic RCE CVSS 9.8\n\nThat's a nice high score. However it's a high score because Windows runs their MSQuic copy in the kernel. An unauthenticated Kernel RCE is a big deal. We inherit that CVSS score. If it was just .NET it'd maybe be a 9.2\n\nSo, don't panic too hard over this.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5upqfs2m"}, {"timestamp": "2026-10-13T19:08:05.827Z", "date_only": false, "value": "2026-10-13T19:08:05.827722Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5uwryk2m", "record": "CVE-2026-105016", "field": "creation_timestamp", "uuid": "5de1e935-2262-4487-b5be-04274d8b0c22", "content": "CVE-2026-105016 MSQuic RCE CVSS 9.8\n\nThat's a nice high score. However it's a high score because Windows runs their MSQuic copy in the kernel. An unauthenticated Kernel RCE is a big deal. We inherit that CVSS score. If it was just .NET it'd maybe be a 9.2\n\nSo, don't panic too hard over this.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5uwryk2m"}, {"timestamp": "2026-10-13T19:08:08.523Z", "date_only": false, "value": "2026-10-13T19:08:08.523701Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbrkk2m", "record": "CVE-2026-105016", "field": "creation_timestamp", "uuid": "243f3e90-7c04-4f74-9234-4b8bfe25304c", "content": "CVE-2026-105016 MSQuic RCE CVSS 9.8\n\nThat's a nice high score. However it's a high score because Windows runs their MSQuic copy in the kernel. An unauthenticated Kernel RCE is a big deal. We inherit that CVSS score. If it was just .NET it'd maybe be a 9.2\n\nSo, don't panic too hard over this.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbrkk2m"}, {"timestamp": "2026-10-13T19:08:11.734Z", "date_only": false, "value": "2026-10-13T19:08:11.734785Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjs2m", "record": "CVE-2026-105016", "field": "creation_timestamp", "uuid": "59017d43-eeed-4206-8f3d-20eb8570f981", "content": "CVE-2026-105016 MSQuic RCE CVSS 9.8\n\nThat's a nice high score. However it's a high score because Windows runs their MSQuic copy in the kernel. An unauthenticated Kernel RCE is a big deal. We inherit that CVSS score. If it was just .NET it'd maybe be a 9.2\n\nSo, don't panic too hard over this.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjs2m"}, {"timestamp": "2026-10-13T19:08:14.461Z", "date_only": false, "value": "2026-10-13T19:08:14.461684Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjt2m", "record": "CVE-2026-105016", "field": "creation_timestamp", "uuid": "791b711a-9b65-46cb-8d35-6b1e8cd2badc", "content": "CVE-2026-105016 MSQuic RCE CVSS 9.8\n\nThat's a nice high score. However it's a high score because Windows runs their MSQuic copy in the kernel. An unauthenticated Kernel RCE is a big deal. We inherit that CVSS score. If it was just .NET it'd maybe be a 9.2\n\nSo, don't panic too hard over this.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjt2m"}, {"timestamp": "2026-10-13T19:08:17.159Z", "date_only": false, "value": "2026-10-13T19:08:17.159558Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsju2m", "record": "CVE-2026-105016", "field": "creation_timestamp", "uuid": "18d37d00-b532-492e-8957-6da62ebd6e4d", "content": "CVE-2026-105016 MSQuic RCE CVSS 9.8\n\nThat's a nice high score. However it's a high score because Windows runs their MSQuic copy in the kernel. An unauthenticated Kernel RCE is a big deal. We inherit that CVSS score. If it was just .NET it'd maybe be a 9.2\n\nSo, don't panic too hard over this.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsju2m"}, {"timestamp": "2026-10-13T19:08:19.914Z", "date_only": false, "value": "2026-10-13T19:08:19.914801Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjv2m", "record": "CVE-2026-105016", "field": "creation_timestamp", "uuid": "7fe94dbf-42f8-49bc-b2cd-b0ae06ffa9ef", "content": "CVE-2026-105016 MSQuic RCE CVSS 9.8\n\nThat's a nice high score. However it's a high score because Windows runs their MSQuic copy in the kernel. An unauthenticated Kernel RCE is a big deal. We inherit that CVSS score. If it was just .NET it'd maybe be a 9.2\n\nSo, don't panic too hard over this.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjv2m"}, {"timestamp": "2026-10-13T19:08:22.542Z", "date_only": false, "value": "2026-10-13T19:08:22.542128Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjw2m", "record": "CVE-2026-105016", "field": "creation_timestamp", "uuid": "1f1e1acc-17e5-4a38-b6b9-72c6b9b25ea5", "content": "CVE-2026-105016 MSQuic RCE CVSS 9.8\n\nThat's a nice high score. However it's a high score because Windows runs their MSQuic copy in the kernel. An unauthenticated Kernel RCE is a big deal. We inherit that CVSS score. If it was just .NET it'd maybe be a 9.2\n\nSo, don't panic too hard over this.", "url": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjw2m"}, {"timestamp": "2026-10-13T19:17:57.750Z", "date_only": false, "value": "2026-10-13T19:17:57.750", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105016", "record": "FKIE_CVE-2026-105016", "field": "published"}, {"timestamp": "2026-10-13T19:56:35Z", "date_only": false, "value": "2026-10-13T19:56:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5GJQ-3F94-RCF7", "record": "GHSA-5GJQ-3F94-RCF7", "field": "published"}, {"timestamp": "2026-10-13T19:56:35Z", "date_only": false, "value": "2026-10-13T19:56:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5GJQ-3F94-RCF7", "record": "GHSA-5GJQ-3F94-RCF7", "field": "modified"}, {"timestamp": "2026-10-13T20:10:18.100Z", "date_only": false, "value": "2026-10-13T20:10:18.100632Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxrtnnrshg2q", "record": "CVE-2026-105016", "field": "creation_timestamp", "uuid": "170b6469-877d-489c-b9ba-0e0c93b3764e", "content": "\ud83d\udea8 CVE-2026-105016 \u2014 CVSS 9.8 CRITICAL\n\nHeap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105016\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxrtnnrshg2q"}, {"timestamp": "2026-10-13T20:31:20.321Z", "date_only": false, "value": "2026-10-13T20:31:20.321637Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117435497182162484", "record": "CVE-2026-105016", "field": "creation_timestamp", "uuid": "0dbdedb6-ce12-41a0-9f48-f08397f03458", "content": "\u26a0\ufe0f The severity is increased for this new vulnerability affecting Microsoft .NET and other products (CVE-2026-105016) https://vuldb.com/vuln/418039", "url": "https://infosec.exchange/users/vuldb/statuses/117435497182162484"}, {"timestamp": "2026-10-13T20:34:26.283Z", "date_only": false, "value": "2026-10-13T20:34:26.283844Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117435509357399726", "record": "CVE-2026-105016", "field": "creation_timestamp", "uuid": "965505d5-b5a5-4785-8009-3e957f644c6e", "content": "CVE-2026-105016 Microsoft QUIC Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.\nhttps://www.cve.org/CVERecord?id=CVE-2026-105016https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105016#microsoft #Microsoft #.NET10.0 #.NET11.0 #.NET8.0 #.NET9.0 #MicrosoftVisualStudio2022version17.14 #MicrosoftVisualStudio2026version18.10 #Windows11version23H2 #Windows11Version23H2 #Windows11Version24H2 #Windows11Version25H2 #Windows11version26H1 #Windows11Version26H2 #WindowsServer2022 #WindowsServer2025 #WindowsServer2025(ServerCoreinstallation)#CVE_2026_105016#bot", "url": "https://infosec.exchange/users/cve/statuses/117435509357399726"}, {"timestamp": "2026-10-13T22:01:42.291Z", "date_only": false, "value": "2026-10-13T22:01:42.291437Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-105016", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T22:01:42.291Z", "date_only": false, "value": "2026-10-13T22:01:42.291437Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105016", "record": "FKIE_CVE-2026-105016", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T22:06:23.110Z", "date_only": false, "value": "2026-10-13T22:06:23.110Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-105016", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T23:17:26.170Z", "date_only": false, "value": "2026-10-13T23:17:26.170", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105016", "record": "FKIE_CVE-2026-105016", "field": "lastModified"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1313", "record": "CERTFR-2026-AVI-1313", "field": "last_revision_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1314", "record": "CERTFR-2026-AVI-1314", "field": "last_revision_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "last_revision_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1313", "record": "CERTFR-2026-AVI-1313", "field": "initial_release_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1314", "record": "CERTFR-2026-AVI-1314", "field": "initial_release_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "initial_release_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1313", "record": "CERTFR-2026-AVI-1313", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1314", "record": "CERTFR-2026-AVI-1314", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1316", "record": "CERTFR-2026-AVI-1316", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-14T01:49:33Z", "date_only": false, "value": "2026-10-14T01:49:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25", "record": "CVE-2026-105016", "field": "creation_timestamp", "uuid": "5355344e-7a6c-4b36-ad74-51ff915a560e", "url": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25"}, {"timestamp": "2026-10-14T05:30:05.476Z", "date_only": false, "value": "2026-10-14T05:30:05.476919Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsswnce4524", "record": "CVE-2026-105016", "field": "creation_timestamp", "uuid": "f5845a24-f8af-43fd-9f7f-4de00796ded7", "content": "CVE-2026-105016 - .net 10.0\nIf your .NET applications (versions 8.0, 9.0, 10.0, or 11 RC2) use the Microsoft.Native.Quic.MsQuic.Schannel package version 2.5.11-ci.156755675, a specially crafted network\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #dotnet #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsswnce4524"}, {"timestamp": "2026-10-14T18:01:11.651Z", "date_only": false, "value": "2026-10-14T18:01:11.651Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-105016", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T18:01:11.651Z", "date_only": false, "value": "2026-10-14T18:01:11.651Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "cve-2026-105016", "field": "containers.cna.providerMetadata.dateUpdated"}]}