CVE-2026-118625 | MLflow Tracking Server improper authorization
A vulnerability was found in MLflow. It has been rated as critical. The impacted element is an unknown function of
Read MoreSecurity
03
CVE-2026-118628 | MLflow server-side request forgery
A vulnerability categorized as critical has been discovered in MLflow. This affects an unknown function. Such manipulation leads to server-side
Read MoreCVE-2026-119189 | Digitalbazaar Forge up to 1.4.0 pki.verifyCertificateChain certificate validation
A vulnerability identified as problematic has been detected in Digitalbazaar Forge up to 1.4.0. This impacts the function pki.verifyCertificateChain. Performing
Read MoreCVE-2026-119188 | Digitalbazaar Forge up to 1.4.0 TLS Handshake Processing process input validation
A vulnerability labeled as problematic has been found in Digitalbazaar Forge up to 1.4.0. Affected is the function process of
Read MoreCVE-2026-119191 | Digital Bazaar Forge up to 1.4.0 Bit String Decoding asn1.fromDer memory allocation
A vulnerability marked as problematic has been reported in Digital Bazaar Forge up to 1.4.0. Affected by this vulnerability is
Read MoreCVE-2026-119187 | Digitalbazaar Forge up to 1.4.0 TLS Record Processing forge.tls forge.tls.createConnection denial of service
A vulnerability described as problematic has been identified in Digitalbazaar Forge up to 1.4.0. Affected by this issue is the
Read MoreCVE-2026-119190 | DigitalBazaar Forge up to 1.4.0 Certificate Chain Verification pki.verifyCertificateChain certificate validation
A vulnerability classified as problematic has been found in DigitalBazaar Forge up to 1.4.0. This affects the function pki.verifyCertificateChain of
Read More
IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
IDC has named Microsoft a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises. The post
Read More
Tracking AI adoption in North Korean threat actor tradecraft
As Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed and efficiency of attacks,
Read MoreCVE-2026-62374 | Openwallet Foundation sd-jwt-js up to 0.19.0 Decode SDJwtInstance.verify improper authorization
A vulnerability has been found in Openwallet Foundation sd-jwt-js up to 0.19.0 and classified as critical. Affected is the function
Read More