CyberICT

CVE-2026-39824

Microsoft · Published May 27, 2026

CVSS v3.1

CRITICAL
Patch availableGet patch

Description

Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows. Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows

Affected Products

  • azl3 application-gateway-kubernetes-ingress 1.7.7-3 on Azure Linux 3.0
  • azl3 azcopy 10.25.1-4 on Azure Linux 3.0
  • azl3 azurelinux-image-tools 1.2.0-2 on Azure Linux 3.0
  • azl3 cert-manager 1.12.15-6 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U