parser security

CVE-2026-33750 is a classic availability bug hiding inside a seemingly ordinary text-processing feature: brace expansion. Microsoft’s description points to a zero-step sequence path that can send the parser into a process hang and eventual memory exhaustion, which means the issue is not just a...