CVE-2026-40170 ngtcp2 has a qlog transport parameter serialization stack buffer overflow Information published. EPSS 0.01 CVE-2026-40170 ngtcp2 US Microsoft Security · 19. 5. 10:44