MEDIUM

Chromium: CVE-2026-78966 Externally controlled reference in QUIC

Microsoft Security Response Center • Aug 28, 2026

HIGH

CVE-2026-62898 Microsoft QUIC Information Disclosure Vulnerability

Microsoft Security Response Center • Aug 11, 2026

MEDIUM

HTTP/3 Trailer HEADERS Frame Triggers Unhandled Exception in Google ESF: 60s Hang & QUIC INTERNAL_ERROR 0x0001 | Protocol RE | Netacoding

Reddit r/netsec • Aug 09, 2026

INFO

An API for MoQ: provision your own isolated relays

Cloudflare Blog • Jul 31, 2026

MEDIUM

CVE-2026-32665 Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass

Microsoft Security Response Center • Jul 23, 2026

MEDIUM

CVE-2026-55991 Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2

Microsoft Security Response Center • Jul 23, 2026

MEDIUM

Chromium: CVE-2026-13799 Use after free in QUIC

Microsoft Security Response Center • Jul 03, 2026

MEDIUM

CVE-2026-40460 NGINX ngx_quic_module vulnerability

Microsoft Security Response Center • May 16, 2026

HIGH

HAProxy HTTP/3 -> HTTP/1 Desync: Cross-Protocol Smuggling via a Standalone QUIC FIN (CVE-2026-33555)

Reddit r/netsec • Apr 16, 2026

MEDIUM

February 2026 — CVE-2026-26080 and CVE-2026-26081: QUIC denial of service

Web Discovery • Feb 12, 2026

CRITICAL

Debian DSA-6130-1 Deep Dive: HAProxy QUIC Denial of Service – Technical Analysis, Mitigation, and Performance Retention

Web Discovery • Feb 12, 2026