CVE-2026-42767 NULL Pointer Dereference in CRMF EncryptedValue Decryption Information published. EPSS 0.01 CVE-2026-42767 US Microsoft Security · 13. 6. 10:05