Back to list

P11-kit: p11-kit: null dereference via c_derivekey with specific null parameters — CVE-2026-2100

MSRC · Microsoft · CVE-2026-2100

ID
CVE-2026-2100
Date
Activity
Source
MSRC
Vendor
Microsoft
Threat
medium
CVSS
5.3

Summary

CVE-2026-2100 is a advisory from MSRC. P11-kit: p11-kit: null dereference via c_derivekey with specific null parameters Vendor: Microsoft. Severity/Threat: medium.

What to do

General, cautious steps (verify details in the official source):

  • Review exposure and plan remediation based on risk and environment.
  • Identify affected product versions in your inventory and verify whether you are impacted.
  • Apply vendor patches/updates or recommended mitigations as soon as available.
  • Read the official advisory for exact affected versions and remediation steps.

Official advisory

Related advisories