CVE-2026-62815: Microsoft QUIC Remote Code Execution
CVE-2026-62815 is a remote, unauthenticated code execution vulnerability in Microsoft's QUIC implementation, requiring no user interaction.
Tag: QUIC
Microsoft QUIC: Unauthenticated RCE Vulnerability
Microsoft QUIC is affected by CVE-2026-62815, a remote code execution flaw requiring no user interaction.
CVE-2026-34183: OpenSSL QUIC PATH_CHALLENGE Unbounded Memory Growth
A moderate-severity vulnerability in OpenSSL's QUIC implementation allows unbounded memory growth via the PATH_CHALLENGE handler, leading to denial of service through memory…
XQUIC Library
XQUIC is Alibaba's open-source QUIC and HTTP/3 library. All versions through v1.9.4 are vulnerable to the XRING flaw, which allows remote clients…
DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic
Threat actors associated with the DragonForce ransomware group have been observed using a custom Go-based remote access trojan (RAT) called Backdoor.Turn to…
Backdoor.Turn Remote Access Trojan
Backdoor.Turn is a custom Go-based RAT that conceals C2 traffic inside Microsoft Teams relay infrastructure using TURN relays and QUIC sessions, supporting…