CVE-2026-3276: Potential DoS via quadratic complexity in unicodedata.normalize()

Overview

Severity

N/A

Exploit Status

Not Exploited

Patch Tuesday

2026-Jun

Released

2026-06-07

Last Updated

2026-08-12

EPSS Score

0.49% (percentile: 40.1%)

Affected Products (3)

Other

• 21492-17084
• 21379-17084
• 21694-17084

Revision History

• 2026-06-07: Information published.
• 2026-06-08: Information published.
• 2026-06-28: Information published.
• 2026-08-12: Information published.