CVE-2026-32179: MsQuic has a Remote Elevation of Privilege Vulnerability

April 16, 2026 (updated May 8, 2026)

Improper input validation in Microsoft QUIC allows an unauthorized attacker to elevate privileges over a network.

References

github.com/advisories/GHSA-gvvw-8j96-8g5r
github.com/microsoft/msquic/commit/1e6e999b199430effeefee3d85baa0c9dd35ad5e
github.com/microsoft/msquic/security/advisories/GHSA-gvvw-8j96-8g5r
nvd.nist.gov/vuln/detail/CVE-2026-32179

Code Behaviors & Features

Detect and mitigate CVE-2026-32179 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →