cve 2026 33936

CVE-2026-33936 is a denial-of-service vulnerability in python-ecdsa caused by improper DER length validation in crafted private keys. Microsoft classifies the impact as a DoS or availability degradation issue, meaning an attacker may reduce performance or cause intermittent interruptions rather than a full service outage. This distinction is important for defenders: the flaw is worth taking seriously anywhere untrusted private-key material can be introduced into a processing path. The underlying library has a long-standing security caveat. WindowsForum.com discussions cover the technical details, affected versions, and mitigation strategies for this CVE.