Microsoft’s April 7, 2026 OpenSSL advisory for CVE-2026-28387 describes a low-severity, client-side use-after-free and possible double-free flaw in DANE TLSA certificate validation, affecting OpenSSL 1.1.1 and 3.x branches before patched releases. The dry wording hides a familiar enterprise...