cve 2026 42013

Microsoft’s Security Update Guide entry for CVE-2026-42013 describes a GnuTLS certificate-validation flaw in which an oversized Subject Alternative Name can make validation fall back to the certificate Common Name, potentially enabling spoofing or man-in-the-middle attacks against software that...