CVE-2026-42499 Quadratic string concatenation in consumePhrase in net/mail Information published. EPSS 0.01 CVE-2026-42499 US Microsoft Security · 19. 5. 10:43