The vulnerability identified as CVE-2026-45445 affects Microsoft product version 3.0. It involves the AES-OCB encryption mode where the initialization vector (IV) is ignored during the EVP_Cipher() function execution. This cryptographic misuse can lead to weakened encryption assurances. The issue is categorized under CWE-325, indicating improper verification of cryptographic parameters. No CVSS score or detailed impact metrics are available, and no official patch or remediation guidance has been published by Microsoft as of the provided data.

Ignoring the IV in AES-OCB encryption can compromise the cryptographic strength of the encryption process, potentially allowing attackers to undermine data confidentiality or integrity depending on usage context. However, no known exploits are reported in the wild, and the specific impact on Microsoft product functionality or data security is not detailed in the available information.

Patch status is not yet confirmed — check the Microsoft Security Response Center advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No vendor advisory or patch links are provided at this time.