EIP-2026-118781

This is a technical writeup describing an information disclosure vulnerability in Microsoft's Crypto API, where X.509 certificate validation triggers arbitrary HTTP requests. The issue affects Microsoft Outlook 2007, Windows Live Mail 2008, and Office 2007, potentially enabling port scanning or tracking document reads.