Microsoft Security Response Center Follow CVE-2026-15712 Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-termination assumption https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15712 msrc.microsoft.com
