A critical use after free vulnerability in Microsoft QUIC affects multiple versions of Windows 11 and Windows Server 2022, posing a severe risk of remote code execution.

This vulnerability is a use after free condition within the Microsoft QUIC implementation. It allows an unauthenticated attacker to trigger memory corruption and execute arbitrary code over a network without requiring user interaction.

The CVSS score of 9.8 reflects the extreme severity of this flaw, as it is network-exploitable and fully automatable. Successful exploitation grants an attacker full control over the affected system, potentially leading to unauthorized data exfiltration, lateral movement within the network, and complete service disruption.

Immediate Action: Apply the latest cumulative security updates provided by Microsoft for the affected Windows versions immediately.

Proactive Monitoring: Monitor network traffic for unusual QUIC protocol patterns or malformed packets directed at enterprise endpoints and servers.

Compensating Controls: Ensure that host-based firewalls are configured to limit exposure of QUIC-related services where feasible, and utilize endpoint detection and response tools to identify anomalous process behavior.

Public Exploit Available: Unknown

Given the critical CVSS score and the potential for unauthenticated remote code execution, this vulnerability represents an urgent threat. Organizations should prioritize patching across all identified Windows platforms to neutralize the risk of compromise.