Back to vendor advisories
Microsoft Security Response CenterCVE-2026-111943

Distrust compromised intermediate certificates in crypto/x509

HighVendor CVSS 7.4 / 10 1 CVE Published Oct 23, 2026 at 1:08 AM UTC

Summary

Mariner

Products covered

  • azl3 gcc 13.2.0-7 on Azure Linux 3.0

  • azl3 golang 1.26.7-1 on Azure Linux 3.0

  • azl3 golang 1.27.1-1 on Azure Linux 3.0

  • azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0

  • azl3 tensorflow 2.16.1-11 on Azure Linux 3.0

Remediation

Release Notes

CVEs in this advisory 1

Updates

  1. Published by Microsoft Security Response Center

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.