CVE-2026-120689: Uncontrolled Recursion in HDF5 H5B__iterate_helper() via Crafted File
CVE-2026-120689 is a vulnerability in Uncontrolled Recursion in HDF5 H5B__iterate_helper() via Crafted File, rated Low by Microsoft. Microsoft has not reported exploitation in the wild. The EPSS model estimates a 0.18% probability of exploitation activity in the next 30 days, higher than 7% of all scored vulnerabilities. Microsoft released the fix on 4 November 2026, outside Patch Tuesday. It affects 1 product in 1 product family (Open Source Software).