CVE-2026-105794
- Source
- https://cve.org/CVERecord?id=CVE-2026-105794
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-105794.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-105794
- Aliases
- Published
- 2026-10-06T14:14:54Z
- Modified
- 2026-10-07T07:00:28Z
- Severity
-
- 9.1 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL
- Details
-
MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rust. Prior to 2.4.20, 2.5.11, and 2.6.1, MsQuic clients using the OpenSSL or QuicTLS TLS backend do not properly verify that a server certificate matches the intended target server hostname. An on-path attacker can therefore present a certificate that does not match the intended target hostname and spoof the server in a man-in-the-middle attack. The Schannel backend is not affected. This issue is fixed in versions 2.4.20, 2.5.11, and 2.6.1.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-295" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/105xxx/CVE-2026-105794.json" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/105xxx/CVE-2026-105794.json
- https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412
- https://github.com/microsoft/msquic/commit/508e811370df93e2ad848f5c78347d4fe4f65a91
- https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81
- https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83
- https://github.com/microsoft/msquic/pull/6274
- https://github.com/microsoft/msquic/pull/6275
- https://github.com/microsoft/msquic/pull/6276
- https://github.com/microsoft/msquic/pull/6277
- https://github.com/microsoft/msquic/releases/tag/v2.4.20
- https://github.com/microsoft/msquic/releases/tag/v2.5.11
- https://github.com/microsoft/msquic/releases/tag/v2.6.1
- https://github.com/microsoft/msquic/security/advisories/GHSA-w5f4-fx9m-m4q7
- https://nvd.nist.gov/vuln/detail/CVE-2026-105794
Affected packages
Git / github.com/microsoft/msquic
Affected ranges
- Type
- GIT
- Repo
- https://github.com/microsoft/msquic
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedIntroducedFixedIntroducedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "introduced": "0" }, { "fixed": "2.4.20" }, { "introduced": "2.5.0" }, { "fixed": "2.5.11" }, { "introduced": "2.6.0" }, { "fixed": "2.6.1" } ], "source": "AFFECTED_FIELD" }
Affected versions
v0.*
v0.9-draft-23
v0.9-draft-24
v0.9-draft-25
v0.9-draft-27
v0.9-draft-28
v0.9-draft-29
v0.9.1-draft-30
v0.9.2-draft-31
v1.*
v1.2.0
v1.3.0
v1.4.0
v1.5.0
v1.6.0
v1.7.0
v1.8.0
v1.9.0
v2.*
v2.3.0
v2.4.1
v2.4.10
v2.4.11
v2.4.12
v2.4.13
v2.4.14
v2.4.15
v2.4.15-rc
v2.4.16
v2.4.17
v2.4.17-rc
v2.4.17-rc2
v2.4.18
v2.4.18-rc
v2.4.19
v2.4.19-rc
v2.4.2
v2.4.20-rc
v2.4.3
v2.4.4
v2.4.5
v2.4.7
v2.4.8
v2.4.9
v2.5.0
v2.5.1
v2.5.10
v2.5.10-rc
v2.5.11-rc
v2.5.2
v2.5.3
v2.5.4
v2.5.5
v2.5.6
v2.5.6-rc
v2.5.7
v2.5.7-rc
v2.5.7-rc2
v2.5.8
v2.5.8-rc
v2.5.9
v2.5.9-rc
v2.5.9-rc2
v2.6.0
v2.6.1-rc
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-105794.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"190529008162141799708009311894989821702",
"49945833656196869453885540150945434197",
"240524124450448216060827449656816366478",
"91257123344691728148837863602768079443",
"237403836532581489718230664295052025186",
"235872034426344860964942176523135266032",
"313542066149294581011531232668803980088",
"41926049001079335579325716158322086043",
"225174488787581330052660753601017631273",
"204314134016263375763220441924817197027",
"64100404404564426831716992642633599978",
"101080358689592713512731041644183890262"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-05f938c1",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412",
"target": {
"file": "src/platform/unittest/TlsTest.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"134287597387281311588648302175916193140",
"132186138653283940297463378953855015675",
"158173015280156532198007978778530725694",
"152448937488482967724968453697062646821",
"116930210547921721611052500710254990045",
"296698397956707875052861079975354248033",
"88904634897124980992617243322378705317",
"280952862152733749023652082319333729475",
"169410300226803907339940690136500277650",
"160881442166917667476104159329785513964",
"157401353499416147580878944492770695126",
"17241265544844300138108826883119312927",
"25542548114960434192415669117456601176",
"58074033311342413811708528074702177817",
"156354493534158514508575082891380273374",
"214969628370952691540841827419789888756",
"57947000922596567308920953174130512033",
"115338438902178924896927901460959755095",
"298925522054916748398471200540975757167",
"309986937302843445220244993111067896695",
"49278384957566386474845589411610443415",
"304375565020305050345494307985787656357",
"248064354992889601777371014061056086511",
"8724631186648362612125521902376482241",
"286941927591297830538961169344879939166",
"4224899064433291602629248659039743513",
"216146416164237824861799873282545240730",
"275630011976803995010557786185110648425",
"140150338158300021929609786551180246257",
"240327671693684159670832865980671257130",
"11347040696622821002662797286170264855",
"327411238474074873352486301318029006216",
"126772323629642261041955826514029152176",
"230812591877668241189204091950798368013",
"213496821169164113274952489161060239151",
"319354718395048939014751376374965820362",
"176787837626596345107722248069945362369",
"160381035017522467669829396179563880948",
"332078036925899180262188696257634037339",
"84345166944706388818361778978728504115",
"20589983014229717052633696128117428436",
"242910252279576104274704746029971821344",
"41163823320181130683159084667994333981",
"121850271492855407812476394232441621910",
"335741974886395752229368851214686559898",
"228504323551413466829775590636420135905",
"45369199193105075523387341904567446810",
"232907548996103240276310266144058582239",
"270410803697185956359834601143098048387",
"203472872361562332700267889118844975926",
"57688369053323526136363022120728713209",
"39427795427570096711807103609857373283",
"186222229140646690431008889092131675291",
"318500756731482834285931996005761600235",
"194835752330882885337418993007986645757"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-09c8f2c0",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83",
"target": {
"file": "src/platform/tls_quictls.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"190529008162141799708009311894989821702",
"49945833656196869453885540150945434197",
"240524124450448216060827449656816366478",
"91257123344691728148837863602768079443",
"237403836532581489718230664295052025186",
"235872034426344860964942176523135266032",
"313542066149294581011531232668803980088",
"41926049001079335579325716158322086043",
"225174488787581330052660753601017631273",
"204314134016263375763220441924817197027",
"64100404404564426831716992642633599978",
"101080358689592713512731041644183890262"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-172b01c4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83",
"target": {
"file": "src/platform/unittest/TlsTest.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "245855617085857939058359048570466545042",
"length": 364
},
"id": "CVE-2026-105794-210c2b41",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83",
"target": {
"file": "src/platform/tls_openssl.c",
"function": "CxPlatTlsUninitialize"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "245855617085857939058359048570466545042",
"length": 364
},
"id": "CVE-2026-105794-215bea39",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81",
"target": {
"file": "src/platform/tls_openssl.c",
"function": "CxPlatTlsUninitialize"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"190529008162141799708009311894989821702",
"49945833656196869453885540150945434197",
"240524124450448216060827449656816366478",
"91257123344691728148837863602768079443",
"237403836532581489718230664295052025186",
"235872034426344860964942176523135266032",
"313542066149294581011531232668803980088",
"41926049001079335579325716158322086043",
"225174488787581330052660753601017631273",
"204314134016263375763220441924817197027",
"64100404404564426831716992642633599978",
"101080358689592713512731041644183890262"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-29224715",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81",
"target": {
"file": "src/platform/unittest/TlsTest.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "35246499858758429590113570444943700145",
"length": 838
},
"id": "CVE-2026-105794-2968459d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83",
"target": {
"file": "src/platform/unittest/PlatformTest.cpp",
"function": "TEST"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "245855617085857939058359048570466545042",
"length": 364
},
"id": "CVE-2026-105794-2bd90ebe",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83",
"target": {
"file": "src/platform/tls_quictls.c",
"function": "CxPlatTlsUninitialize"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "288277525431193426427145868415871652585",
"length": 3597
},
"id": "CVE-2026-105794-30345dcd",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81",
"target": {
"file": "src/platform/tls_openssl.c",
"function": "CxPlatTlsCertificateVerifyCallback"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"101965844058963028857030388553504881643",
"171333103538360201412751063465403915525",
"277863407262048742721628450424424897077"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-32e98b1c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81",
"target": {
"file": "src/core/connection.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"251707576438163550521663111443963740005",
"59609594808877942310261754672817014277",
"35451057074958842101594473147763605221",
"10810917654345454312946645930966824309",
"21098551185002868153113158035452118809",
"56203523631195706439103026281162388210",
"182545982909703673873316885085610295209",
"321270477329492656115792472385962607093",
"86465988439136310946258612707233555198",
"64466772775965064257444744528737298859",
"289649748809705219468340952964092804969",
"231906476503029327498225795449399467705",
"202060107898569489136915154310938436434",
"1995224525994155780885478770300155229",
"253157817983072767972898644654711364530",
"237243420196661750544785344281646780502",
"155120796032467735334954334762739940474",
"139994093875159456735350770909050147131",
"234022933456030125329376440430701450935",
"84585480669166784231105463414009337748",
"268029453855139864628574084750313429310",
"20959372969725980241151813495193130217",
"206810151013959743855421699402407101713",
"211733873019726996756893909873869829137",
"124591249027170919458162108341945946249",
"139130291877641806823876584076162233729",
"122020005674544876471285062544557729067",
"247814149842132277118377833950303758130",
"91179368441600999479137103268734767765"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-3c134b7b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412",
"target": {
"file": "src/inc/msquic_posix.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"134287597387281311588648302175916193140",
"132186138653283940297463378953855015675",
"158173015280156532198007978778530725694",
"152448937488482967724968453697062646821",
"116930210547921721611052500710254990045",
"296698397956707875052861079975354248033",
"88904634897124980992617243322378705317",
"280952862152733749023652082319333729475",
"169410300226803907339940690136500277650",
"160881442166917667476104159329785513964",
"157401353499416147580878944492770695126",
"17241265544844300138108826883119312927",
"25542548114960434192415669117456601176",
"58074033311342413811708528074702177817",
"156354493534158514508575082891380273374",
"214969628370952691540841827419789888756",
"57947000922596567308920953174130512033",
"115338438902178924896927901460959755095",
"298925522054916748398471200540975757167",
"309986937302843445220244993111067896695",
"49278384957566386474845589411610443415",
"304375565020305050345494307985787656357",
"248064354992889601777371014061056086511",
"8724631186648362612125521902376482241",
"286941927591297830538961169344879939166",
"4224899064433291602629248659039743513",
"216146416164237824861799873282545240730",
"275630011976803995010557786185110648425",
"153273429328423188683144069530068070173",
"95656914638886947321893087195816541896",
"133237630580661037046813770509518897459",
"126772323629642261041955826514029152176",
"230812591877668241189204091950798368013",
"213496821169164113274952489161060239151",
"319354718395048939014751376374965820362",
"176787837626596345107722248069945362369",
"160381035017522467669829396179563880948",
"332078036925899180262188696257634037339",
"84345166944706388818361778978728504115",
"20589983014229717052633696128117428436",
"242910252279576104274704746029971821344",
"257406200344419014234091824882521082250",
"335741974886395752229368851214686559898",
"228504323551413466829775590636420135905",
"45369199193105075523387341904567446810",
"232907548996103240276310266144058582239",
"270410803697185956359834601143098048387",
"203472872361562332700267889118844975926",
"57688369053323526136363022120728713209",
"39427795427570096711807103609857373283",
"186222229140646690431008889092131675291",
"318500756731482834285931996005761600235",
"194835752330882885337418993007986645757"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-3e75c82a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412",
"target": {
"file": "src/platform/tls_quictls.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "35246499858758429590113570444943700145",
"length": 838
},
"id": "CVE-2026-105794-4316990d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412",
"target": {
"file": "src/platform/unittest/PlatformTest.cpp",
"function": "TEST"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"101965844058963028857030388553504881643",
"171333103538360201412751063465403915525",
"277863407262048742721628450424424897077"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-442234c2",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83",
"target": {
"file": "src/core/connection.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"129820918214159512419663885297352662811",
"121644953499054680218616442055760810272",
"275090948667734732883589981419340564386",
"166085876103328609856337044346051814347",
"238622193195824233049789142931444946938",
"139130291877641806823876584076162233729",
"122020005674544876471285062544557729067",
"36766704928733901300152263218803295211",
"19921899965424160348611827745289524582"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-5268a28a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83",
"target": {
"file": "src/inc/msquic_winuser.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"134287597387281311588648302175916193140",
"132186138653283940297463378953855015675",
"158173015280156532198007978778530725694",
"152448937488482967724968453697062646821",
"116930210547921721611052500710254990045",
"296698397956707875052861079975354248033",
"88904634897124980992617243322378705317",
"280952862152733749023652082319333729475",
"169410300226803907339940690136500277650",
"160881442166917667476104159329785513964",
"157401353499416147580878944492770695126",
"17241265544844300138108826883119312927",
"25542548114960434192415669117456601176",
"58074033311342413811708528074702177817",
"156354493534158514508575082891380273374",
"214969628370952691540841827419789888756",
"57947000922596567308920953174130512033",
"115338438902178924896927901460959755095",
"298925522054916748398471200540975757167",
"309986937302843445220244993111067896695",
"49278384957566386474845589411610443415",
"304375565020305050345494307985787656357",
"248064354992889601777371014061056086511",
"8724631186648362612125521902376482241",
"286941927591297830538961169344879939166",
"4224899064433291602629248659039743513",
"216146416164237824861799873282545240730",
"275630011976803995010557786185110648425",
"153273429328423188683144069530068070173",
"95656914638886947321893087195816541896",
"133237630580661037046813770509518897459",
"126772323629642261041955826514029152176",
"230812591877668241189204091950798368013",
"213496821169164113274952489161060239151",
"319354718395048939014751376374965820362",
"176787837626596345107722248069945362369",
"160381035017522467669829396179563880948",
"332078036925899180262188696257634037339",
"84345166944706388818361778978728504115",
"20589983014229717052633696128117428436",
"242910252279576104274704746029971821344",
"257406200344419014234091824882521082250",
"335741974886395752229368851214686559898",
"228504323551413466829775590636420135905",
"45369199193105075523387341904567446810",
"232907548996103240276310266144058582239",
"270410803697185956359834601143098048387",
"203472872361562332700267889118844975926",
"57688369053323526136363022120728713209",
"39427795427570096711807103609857373283",
"186222229140646690431008889092131675291",
"318500756731482834285931996005761600235",
"194835752330882885337418993007986645757"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-54423ec6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81",
"target": {
"file": "src/platform/tls_openssl.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "35246499858758429590113570444943700145",
"length": 838
},
"id": "CVE-2026-105794-583b42ab",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81",
"target": {
"file": "src/platform/unittest/PlatformTest.cpp",
"function": "TEST"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"251707576438163550521663111443963740005",
"59609594808877942310261754672817014277",
"35451057074958842101594473147763605221",
"10810917654345454312946645930966824309",
"21098551185002868153113158035452118809",
"56203523631195706439103026281162388210",
"182545982909703673873316885085610295209",
"321270477329492656115792472385962607093",
"86465988439136310946258612707233555198",
"64466772775965064257444744528737298859",
"289649748809705219468340952964092804969",
"231906476503029327498225795449399467705",
"202060107898569489136915154310938436434",
"1995224525994155780885478770300155229",
"253157817983072767972898644654711364530",
"237243420196661750544785344281646780502",
"155120796032467735334954334762739940474",
"139994093875159456735350770909050147131",
"234022933456030125329376440430701450935",
"84585480669166784231105463414009337748",
"268029453855139864628574084750313429310",
"20959372969725980241151813495193130217",
"206810151013959743855421699402407101713",
"211733873019726996756893909873869829137",
"124591249027170919458162108341945946249",
"139130291877641806823876584076162233729",
"158696361743146524802421363735164785480",
"222798938613819185282627353773571690953",
"146000346275602519424966697268222794596"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-683d0df3",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81",
"target": {
"file": "src/inc/msquic_posix.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"251707576438163550521663111443963740005",
"59609594808877942310261754672817014277",
"35451057074958842101594473147763605221",
"10810917654345454312946645930966824309",
"21098551185002868153113158035452118809",
"56203523631195706439103026281162388210",
"182545982909703673873316885085610295209",
"321270477329492656115792472385962607093",
"86465988439136310946258612707233555198",
"64466772775965064257444744528737298859",
"289649748809705219468340952964092804969",
"231906476503029327498225795449399467705",
"202060107898569489136915154310938436434",
"1995224525994155780885478770300155229",
"253157817983072767972898644654711364530",
"237243420196661750544785344281646780502",
"155120796032467735334954334762739940474",
"139994093875159456735350770909050147131",
"234022933456030125329376440430701450935",
"84585480669166784231105463414009337748",
"268029453855139864628574084750313429310",
"20959372969725980241151813495193130217",
"206810151013959743855421699402407101713",
"211733873019726996756893909873869829137",
"292132845062366167301885292890697650256",
"139130291877641806823876584076162233729",
"122020005674544876471285062544557729067",
"247814149842132277118377833950303758130",
"91179368441600999479137103268734767765"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-6a3c463a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83",
"target": {
"file": "src/inc/msquic_posix.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"129820918214159512419663885297352662811",
"121644953499054680218616442055760810272",
"275090948667734732883589981419340564386",
"57402921360274088164821610776792073909",
"234935388865274695056856385577819690690",
"139130291877641806823876584076162233729",
"122020005674544876471285062544557729067",
"36766704928733901300152263218803295211",
"19921899965424160348611827745289524582"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-7b148e55",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412",
"target": {
"file": "src/inc/msquic_winuser.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"134287597387281311588648302175916193140",
"132186138653283940297463378953855015675",
"158173015280156532198007978778530725694",
"152448937488482967724968453697062646821",
"116930210547921721611052500710254990045",
"296698397956707875052861079975354248033",
"88904634897124980992617243322378705317",
"280952862152733749023652082319333729475",
"169410300226803907339940690136500277650",
"160881442166917667476104159329785513964",
"157401353499416147580878944492770695126",
"17241265544844300138108826883119312927",
"27507354949264462494454747076716173262",
"46859846720668100017168985991914510928",
"88878537726864581545806673105323855588",
"214969628370952691540841827419789888756",
"57947000922596567308920953174130512033",
"115338438902178924896927901460959755095",
"298925522054916748398471200540975757167",
"309986937302843445220244993111067896695",
"49278384957566386474845589411610443415",
"304375565020305050345494307985787656357",
"248064354992889601777371014061056086511",
"8724631186648362612125521902376482241",
"286941927591297830538961169344879939166",
"4224899064433291602629248659039743513",
"216146416164237824861799873282545240730",
"275630011976803995010557786185110648425",
"140150338158300021929609786551180246257",
"240327671693684159670832865980671257130",
"11347040696622821002662797286170264855",
"327411238474074873352486301318029006216",
"126772323629642261041955826514029152176",
"230812591877668241189204091950798368013",
"213496821169164113274952489161060239151",
"319354718395048939014751376374965820362",
"176787837626596345107722248069945362369",
"160381035017522467669829396179563880948",
"332078036925899180262188696257634037339",
"84345166944706388818361778978728504115",
"20589983014229717052633696128117428436",
"242910252279576104274704746029971821344",
"41163823320181130683159084667994333981",
"121850271492855407812476394232441621910",
"335741974886395752229368851214686559898",
"228504323551413466829775590636420135905",
"45369199193105075523387341904567446810",
"232907548996103240276310266144058582239",
"270410803697185956359834601143098048387",
"203472872361562332700267889118844975926",
"57688369053323526136363022120728713209",
"39427795427570096711807103609857373283",
"186222229140646690431008889092131675291",
"318500756731482834285931996005761600235",
"194835752330882885337418993007986645757"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-7c411ecb",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83",
"target": {
"file": "src/platform/tls_openssl.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"299964214990148755153283802614028993012",
"219240874600054579600439534006766008101",
"209156989857626953868871963463307189880",
"111485769039753840786039972554009557656",
"190218353770864346637523539036896700466",
"314600797881875240397108234105109665760",
"26297016178078414544572029760626666290",
"191086191998268412692037727401834985891",
"97090773644713073263061881752004317101",
"203943562506893535082775174117921196187",
"221382792732590671715412439651866751057",
"300027307845167376286812046828904931260",
"253506920969205034395977141670965816045",
"257358840051341002418771858500436501224",
"4019725094647275963120787967899332174",
"230741571997413383474459311986378693580",
"98681090744520427516961749905452385196",
"192117288067757907511619185703816356390",
"184384629788808324540621830738140470007",
"194999157437794135059361257118036124418",
"337383193794098640246774091699133294734",
"162909624465611685590763385684924229828",
"124250535189086347871354155320417446570",
"68163983275166105148468915038271702069",
"177103440131296622645786472255604924422",
"214333339274958117526936670960572328273",
"294505241641410969370599530711034954089",
"196089804792954984639278850230946487956",
"13788112032844990206453997326831945406",
"97671367406890938511873542511064335748",
"138799644901775057739026038414930169465",
"315343420749757240776991045824008298478"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-871891d5",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83",
"target": {
"file": "src/platform/unittest/PlatformTest.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"101965844058963028857030388553504881643",
"171333103538360201412751063465403915525",
"277863407262048742721628450424424897077"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-8a9c2800",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412",
"target": {
"file": "src/core/connection.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"72058718474497528515416304919482204448",
"65369787361548019507590961843979664288",
"44901549339198191147823331231685465015",
"111485769039753840786039972554009557656",
"190218353770864346637523539036896700466",
"314600797881875240397108234105109665760",
"26297016178078414544572029760626666290",
"191086191998268412692037727401834985891",
"97090773644713073263061881752004317101",
"203943562506893535082775174117921196187",
"221382792732590671715412439651866751057",
"300027307845167376286812046828904931260",
"253506920969205034395977141670965816045",
"257358840051341002418771858500436501224",
"4019725094647275963120787967899332174",
"230741571997413383474459311986378693580",
"98681090744520427516961749905452385196",
"192117288067757907511619185703816356390",
"184384629788808324540621830738140470007",
"194999157437794135059361257118036124418",
"337383193794098640246774091699133294734",
"162909624465611685590763385684924229828",
"124250535189086347871354155320417446570",
"68163983275166105148468915038271702069",
"177103440131296622645786472255604924422",
"214333339274958117526936670960572328273",
"294505241641410969370599530711034954089",
"196089804792954984639278850230946487956",
"13788112032844990206453997326831945406",
"138427290865554739373703965199200836669",
"327435282257696423843910495176529325026",
"214275479646132504952826587747426773484"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-91fdd1e8",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81",
"target": {
"file": "src/platform/unittest/PlatformTest.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"41963908655349941380833813684761117856",
"333064803622860034691390137894603014337",
"339980590131740655377045626796686504946",
"75062371005928081575537341855740359080",
"109375097647332121152138583499753990424",
"295980367592806653620962189705136951411",
"14639659601737688625689152928986929296",
"75083627228637525260521312527806567683",
"248827145322161812996794605986445975218",
"114554931170169473196954346255542065561",
"314757289425948598681982063378697320336",
"12012691289845690947615836674659543830",
"311334503759430351869052697945625193047",
"119442598402672957812688592618038234047",
"135875327149301973782948913487183618233",
"223027566414782318137082462325947678536",
"317390850013600331302789356834061101820",
"41225245849780355017708512970058779585",
"159693762803874638708444707321830865633",
"232249739349635737740311073713067649372",
"96564182953742614390515634261547301147",
"199378281558255747348664127790883966474",
"73290711298691617906214941438343106158",
"234286541112002895002205116442309519731"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-96021828",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412",
"target": {
"file": "src/platform/tls_schannel.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"238622193195824233049789142931444946938",
"139130291877641806823876584076162233729",
"122020005674544876471285062544557729067",
"247814149842132277118377833950303758130",
"91179368441600999479137103268734767765"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-b517e153",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83",
"target": {
"file": "src/inc/msquic_winkernel.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "288277525431193426427145868415871652585",
"length": 3597
},
"id": "CVE-2026-105794-b5cd6595",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83",
"target": {
"file": "src/platform/tls_quictls.c",
"function": "CxPlatTlsCertificateVerifyCallback"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "288277525431193426427145868415871652585",
"length": 3597
},
"id": "CVE-2026-105794-bcc632b6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83",
"target": {
"file": "src/platform/tls_openssl.c",
"function": "CxPlatTlsCertificateVerifyCallback"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "288277525431193426427145868415871652585",
"length": 3597
},
"id": "CVE-2026-105794-c3b475ec",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412",
"target": {
"file": "src/platform/tls_quictls.c",
"function": "CxPlatTlsCertificateVerifyCallback"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"41963908655349941380833813684761117856",
"333064803622860034691390137894603014337",
"339980590131740655377045626796686504946",
"75062371005928081575537341855740359080",
"109375097647332121152138583499753990424",
"295980367592806653620962189705136951411",
"14639659601737688625689152928986929296",
"75083627228637525260521312527806567683",
"248827145322161812996794605986445975218",
"114554931170169473196954346255542065561",
"314757289425948598681982063378697320336",
"12012691289845690947615836674659543830",
"311334503759430351869052697945625193047",
"119442598402672957812688592618038234047",
"135875327149301973782948913487183618233",
"223027566414782318137082462325947678536",
"317390850013600331302789356834061101820",
"41225245849780355017708512970058779585",
"159693762803874638708444707321830865633",
"232249739349635737740311073713067649372",
"96564182953742614390515634261547301147",
"199378281558255747348664127790883966474",
"73290711298691617906214941438343106158",
"234286541112002895002205116442309519731"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-c75b162d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83",
"target": {
"file": "src/platform/tls_schannel.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"234935388865274695056856385577819690690",
"139130291877641806823876584076162233729",
"122020005674544876471285062544557729067",
"247814149842132277118377833950303758130",
"91179368441600999479137103268734767765"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-d2a465bc",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412",
"target": {
"file": "src/inc/msquic_winkernel.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"129820918214159512419663885297352662811",
"127809860542277201792689481790473443932",
"275461985184883577120949787403418629671",
"57402921360274088164821610776792073909",
"234935388865274695056856385577819690690",
"139130291877641806823876584076162233729",
"158696361743146524802421363735164785480",
"76795112692027150459217556721047265030",
"255458947581843580678996368163936935079"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-e2bdf13e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81",
"target": {
"file": "src/inc/msquic_winuser.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"234935388865274695056856385577819690690",
"139130291877641806823876584076162233729",
"158696361743146524802421363735164785480",
"222798938613819185282627353773571690953",
"146000346275602519424966697268222794596"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-e59fefd0",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81",
"target": {
"file": "src/inc/msquic_winkernel.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"72058718474497528515416304919482204448",
"65369787361548019507590961843979664288",
"44901549339198191147823331231685465015",
"111485769039753840786039972554009557656",
"190218353770864346637523539036896700466",
"314600797881875240397108234105109665760",
"26297016178078414544572029760626666290",
"191086191998268412692037727401834985891",
"97090773644713073263061881752004317101",
"203943562506893535082775174117921196187",
"221382792732590671715412439651866751057",
"300027307845167376286812046828904931260",
"253506920969205034395977141670965816045",
"257358840051341002418771858500436501224",
"4019725094647275963120787967899332174",
"230741571997413383474459311986378693580",
"98681090744520427516961749905452385196",
"192117288067757907511619185703816356390",
"184384629788808324540621830738140470007",
"194999157437794135059361257118036124418",
"337383193794098640246774091699133294734",
"162909624465611685590763385684924229828",
"124250535189086347871354155320417446570",
"68163983275166105148468915038271702069",
"177103440131296622645786472255604924422",
"214333339274958117526936670960572328273",
"294505241641410969370599530711034954089",
"196089804792954984639278850230946487956",
"13788112032844990206453997326831945406",
"138427290865554739373703965199200836669",
"327435282257696423843910495176529325026",
"164080353862288719091991724240553110152"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-e8809eda",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412",
"target": {
"file": "src/platform/unittest/PlatformTest.cpp"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"41963908655349941380833813684761117856",
"333064803622860034691390137894603014337",
"339980590131740655377045626796686504946",
"75062371005928081575537341855740359080",
"109375097647332121152138583499753990424",
"295980367592806653620962189705136951411",
"14639659601737688625689152928986929296",
"75083627228637525260521312527806567683",
"248827145322161812996794605986445975218",
"114554931170169473196954346255542065561",
"314757289425948598681982063378697320336",
"12012691289845690947615836674659543830",
"311334503759430351869052697945625193047",
"119442598402672957812688592618038234047",
"135875327149301973782948913487183618233",
"223027566414782318137082462325947678536",
"317390850013600331302789356834061101820",
"41225245849780355017708512970058779585",
"159693762803874638708444707321830865633",
"232249739349635737740311073713067649372",
"96564182953742614390515634261547301147",
"199378281558255747348664127790883966474",
"73290711298691617906214941438343106158",
"234286541112002895002205116442309519731"
],
"threshold": 0.9
},
"id": "CVE-2026-105794-eb5773a9",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81",
"target": {
"file": "src/platform/tls_schannel.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "245855617085857939058359048570466545042",
"length": 364
},
"id": "CVE-2026-105794-ed7f3620",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412",
"target": {
"file": "src/platform/tls_quictls.c",
"function": "CxPlatTlsUninitialize"
}
}
]
vanir_signatures_modified
"2026-10-07T07:00:28Z"