Known Vulnerabilities for S2n-quic by AWS
Listed below are 10 of the newest known vulnerabilities associated with "S2n-quic" by "AWS".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-105794 json | MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rust. Prior to 2.4.20, 2.5.1... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-105016 json | Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-10-13 | 2026-10-22 |
| CVE-2026-103577 json | Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over ... | Not Provided | 2026-10-13 | 2026-10-13 |
| CVE-2026-100665 json | Netty versions from 4.2.11.Final before 4.2.18.Final contain an incomplete hostname verification fix in the QUIC certificate ... | Not Provided | 2026-09-26 | 2026-10-02 |
| CVE-2026-100660 json | Netty's HTTP/3 codec (io.netty:netty-codec-http3) from 4.2.0.Final through 4.2.17.Final retains unbounded per-stream QPACK en... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100219 json | Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-10-13 | 2026-10-19 |
| CVE-2026-97206 json | NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by a rem... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-94450 json | Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an unauthenticated remot... | Not Provided | 2026-09-22 | 2026-10-20 |
| CVE-2026-90678 json | An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 fron... | Not Provided | 2026-09-13 | 2026-09-14 |
| CVE-2026-88878 json | Traefik is an HTTP reverse proxy and load balancer. In versions >= v2.8.2 through <= v2.11.55 and >= v3.0.0 through <= v3.7.1... | Not Provided | 2026-09-10 | 2026-10-08 |