CVE-2026-42764: NULL Pointer Dereference in QUIC Server Initial Packet Handling

Overview

Severity: High (CVSS 7.5)
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploit Status: Not Exploited
Patch Tuesday: 2026-Jun
Released: 2026-06-13
EPSS Score: 0.04% (percentile: 13.1%)

Affected Products (4)

Other

21217-17084
21370-17084
21400-17084
21433-17084

Revision History

2026-06-13: Information published.