Public security advisories
Current vulnerabilities, known exploitation, Microsoft security updates, and practical guidance from Griffin Technology Partners.
Primary sources
Microsoft Security Response Center
CISA Known Exploited Vulnerabilities
Vulnerability intelligence
Last collection: October 9, 2026
Six-hour refresh · Public-source information only
494 bulletins · Page 13 of 21
JSON feedAn information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.
Affected: Internet Explorer
Added to CISA KEV
An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of files on disk.
Affected: Internet Explorer
Added to CISA KEV
An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.
Affected: Internet Explorer and Edge
Added to CISA KEV
The Graphics Device Interface (GDI) in Microsoft Windows allows local users to gain privileges via a crafted application.
Affected: Windows
Added to CISA KEV
Microsoft XML Core Services (MSXML) improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site.
Affected: XML Core Services
Added to CISA KEV
The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet.
Affected: SMBv1 server
Added to CISA KEV
Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial-of-service (DoS) via a crafted website.
Affected: Internet Explorer
Added to CISA KEV
A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information.
Affected: Internet Explorer
Added to CISA KEV
Microsoft Windows allows an attacker to take control of the affected system when Windows Search fails to handle objects in memory.
Affected: Windows
Added to CISA KEV
A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory.
Affected: Windows
Added to CISA KEV
A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.
Affected: Win32k
Added to CISA KEV
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk.
Affected: Internet Explorer
Added to CISA KEV
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server.
Affected: Windows
Added to CISA KEV
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.
Affected: Windows
Added to CISA KEV
A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links.
Affected: Windows
Added to CISA KEV
A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.
Affected: Windows
Added to CISA KEV
Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation.
Affected: Update Notification Manager
Added to CISA KEV
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
Affected: Windows
Added to CISA KEV
Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code.
Affected: Internet Explorer
Added to CISA KEV
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
Affected: Win32k
Added to CISA KEV
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
Affected: Win32k
Added to CISA KEV
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
Affected: Win32k
Added to CISA KEV
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
Affected: Windows
Added to CISA KEV
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
Affected: Windows
Added to CISA KEV
The collection starts with 90 days of Microsoft updates and CISA additions, plus older Microsoft vulnerabilities still listed by CISA. Older entries do not imply that a product remains supported. Counts describe this collection, not every vulnerability or any customer environment.
Last successful check: October 9, 2026
Last successful check: October 9, 2026
Griffin Technology Partners managed customers may receive additional environment-specific security guidance and remediation assistance through their managed services relationship.
Security bulletins are provided for informational purposes and compiled from authoritative public sources. Vulnerability applicability varies by environment. Validate affected products, configuration, compatibility requirements, and vendor guidance before making production changes.
