CVE-2026-45447
Microsoft · Published June 23, 2026
8.8
CVSS v3.1
HIGHPatch availableGet patch
Description
Heap Use-After-Free in the PKCS7_verify() Function. Heap Use-After-Free in the PKCS7_verify() Function
Affected Products
- azl3 openssl 3.3.7-3 on Azure Linux 3.0
- azl3 kata-containers 3.32.0.kata0-1 on Azure Linux 3.0
- azl3 cloud-hypervisor 51.1.56-1 on Azure Linux 3.0
- azl3 edk2 20240524git3e722403cd16-17 on Azure Linux 3.0
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H