CVE-2026-3644 Incomplete control character validation in http.cookies Information published. EPSS 0.00 CVE-2026-3644 US Microsoft Security · 19. 3. 09:04