CVE-2026-3276 Potential DoS via quadratic complexity in unicodedata.normalize() Information published. EPSS 0.00 CVE-2026-3276 US Microsoft Security · 7. 6. 10:03