CVE-2026-59885

Vendor

Canonical, Microsoft

Product

Ubuntu

EPSS

0.004 (p37)

Exposure class

Operating system

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 45
   Ubuntu notice Ubuntu 6h ago

   pyasn1 vulnerabilities

   It was discovered that pyasn1 did not properly bound the size of long-form tag identifiers when parsing BER, CER, or DER encoded data. An attacker could possibly use this issue to cause applications decoding untrusted ASN.1 data…

   Fix available CVE-2026-59884CVE-2026-59885CVE-2026-59886+4 more Canonical
2. 14
   Advisory MSRC 17 Jul 2026

   CVE-2026-59885 pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service

   Information published.

   CVE-2026-59885 Microsoft