Inefficient policy validation in crypto/x509

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-32281 · Microsoft / collected KEV context

EUVD-2026-20010

GO-2026-4946

BIT-golang-2026-32281

cve-program · CVE-2026-32281

• https://go.dev/cl/758061
• https://go.dev/issue/78281
• https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
• https://pkg.go.dev/vuln/GO-2026-4946

euvd · EUVD-2026-20010

• https://go.dev/cl/758061
• https://go.dev/issue/78281
• https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
• https://pkg.go.dev/vuln/GO-2026-4946

nvd · CVE-2026-32281

• https://go.dev/cl/758061
• https://go.dev/issue/78281
• https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
• https://pkg.go.dev/vuln/GO-2026-4946

osv · GO-2026-4946

• https://go.dev/cl/758061
• https://go.dev/issue/78281
• https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU

• Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise truste… · Advisory content revised · 11 Nov 2026
• Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise truste… · Advisory content revised · 9 Nov 2026
• Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise truste… · Advisory content revised · 7 Nov 2026
• Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise truste… · Advisory content revised · 1 Nov 2026