Microsoft Security Response Center Follow CVE-2026-38752 A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-38752 msrc.microsoft.com