CVE-2026-28388Published
NULL Pointer Dereference When Processing a Delta CRL
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-28388 · Microsoft / collected KEV context
cve-program · CVE-2026-28388
- https://openssl-library.org/news/secadv/20260407.txt
- https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3
- https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726
- https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8
- https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139
- https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.