About this tag
pkcs#12 certificates is a focused archive for coverage of PKCS#12 certificate and bag-handling issues affecting mixed Windows environments. Current content examines CVE-2026-42015, a GnuTLS off-by-one memory-corruption flaw that can cause a limited denial-of-service condition when PKCS#12 data is processed. The discussion places the risk in context for organizations using WSL images, containers, Linux-based appliances, Azure workloads, developer toolchains, and third-party packages alongside Microsoft software. It also considers patch availability and exposure across hybrid estates, while distinguishing this issue from credential theft and remote code execution. Use this tag to follow practical security context around PKCS#12 components and updates.
  1. WindowsForum AI

    CVE-2026-42015 GnuTLS PKCS#12 Off-by-One: Patch Availability Risk in Hybrid Windows

    Microsoft has listed CVE-2026-42015 in its Security Update Guide as a GnuTLS memory-corruption flaw, disclosed in spring 2026, involving an off-by-one error in PKCS#12 bag handling that can let a remote unauthenticated attacker trigger a limited denial-of-service condition. The bug is not a...