CVE-2026-3644
Microsoft · Published March 19, 2026
7.5
CVSS v3.1
HIGHPatch availableGet patch
Description
Incomplete control character validation in http.cookies. Incomplete control character validation in http.cookies
Affected Products
- azl3 python3 3.12.9-9 on Azure Linux 3.0
- cbl2 python3 3.9.19-19 on CBL Mariner 2.0
- azl3 tensorflow 2.16.1-11 on Azure Linux 3.0
- azl3 python3 3.12.9-10 on Azure Linux 3.0
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N