Invoking Encrypted Client Hello privacy leak in crypto/tls

🗓️ 15 Jul 2026 08:01:45Reported by MicrosoftType

mscve🔗 msrc.microsoft.com👁 6 Views

Microsoft is investigating an Encrypted Client Hello privacy leak in the crypto/tls library.

Reporter	Title	Published	Views	Family All 2019
RedhatCVE	CVE-2026-42505	9 Jul 202614:57	–	redhatcve
RedHat Linux	Important: Red Hat Security Advisory: golang security, bug fix, and enhancement update	9 Jul 202619:54	–	redhat
RedHat Linux	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello	9 Jul 202619:54	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update	13 Jul 202614:29	–	redhat
RedHat Linux	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello	13 Jul 202614:29	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.10.2 release	13 Aug 202620:33	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update	8 Jul 202601:54	–	redhat
RedHat Linux	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello	8 Jul 202601:54	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update	8 Jul 202602:42	–	redhat
RedHat Linux	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello	8 Jul 202602:42	–	redhat

Vulners

Node

microsoft azl3_golang_1.26.4-3Range<1.26.5-2

13 Aug 2026 07:12Current

8.4High risk

Vulners AI Score8.4

CVSS 3.15.3

EPSS0.00382

SSVC

microsoft crypto/tls privacy leak ECH Go