Gnutls Vulnerability
The latest Gnutls Vulnerability coverage — news, analysis, and updates from the WindowsNews.AI desk.
GnuTLS PKCS#12 Parsing Flaw (CVE-2026-42015) Exposes Windows Hybrid Systems to Remote Attacks
Microsoft has confirmed a critical memory corruption vulnerability in the GnuTLS library's handling of PKCS#12 certificate files, tracked as CVE-2026-42015. The flaw, disclosed in late April 2026,...
NUL Byte Injection in GnuTLS RSA-PSK Lets Attackers Skip Certificate Check
A high-severity authentication bypass vulnerability in GnuTLS’s RSA-PSK implementation, tracked as CVE-2026-42010, was publicly disclosed in late April 2026. The flaw allows a remote attacker to...
Microsoft Confirms GnuTLS Flaw Hits Azure Linux—But Don’t Assume Your Other VMs Are Safe
On March 10, 2025, Microsoft publicly confirmed that its Azure Linux distribution ships a vulnerable version of the GnuTLS cryptographic library, putting users at risk from a recently disclosed...
GnuTLS Timing Bug Exposes Private Keys—Here's What Microsoft Customers Must Check
On March 14, 2024, security researchers disclosed a flaw in the widely used GnuTLS cryptographic library that can expose private keys when certain signing features are enabled. Microsoft promptly...