Public security advisories
Current vulnerabilities, known exploitation, Microsoft security updates, and practical guidance from Griffin Technology Partners.
Primary sources
Microsoft Security Response Center
CISA Known Exploited Vulnerabilities
Vulnerability intelligence
Last collection: October 9, 2026
Six-hour refresh · Public-source information only
494 bulletins · Page 14 of 21
JSON feedMicrosoft Windows Print Spooler contains an unspecified vulnerability which allow for privilege escalation.
Affected: Windows
Added to CISA KEV
Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS).
Affected: Internet Explorer
Added to CISA KEV
Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation.
Affected: Windows
Added to CISA KEV
Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.
Affected: Active Directory
Added to CISA KEV
Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.
Affected: Active Directory
Added to CISA KEV
The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets.
Affected: SMBv1 server
Added to CISA KEV
Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution.
Affected: HTTP Protocol Stack
Added to CISA KEV
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
Affected: Windows
Added to CISA KEV
Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature.
Affected: Windows
Added to CISA KEV
afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application.
Affected: Ancillary Function Driver (afd.sys)
Added to CISA KEV
Microsoft Word allows attackers to execute remote code or cause a denial-of-service (DoS) via crafted RTF data.
Affected: Word
Added to CISA KEV
Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remote code via a crafted web site that triggers access to a deleted object.
Affected: Internet Explorer
Added to CISA KEV
The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.
Affected: Win32k
Added to CISA KEV
Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document.
Affected: Office
Added to CISA KEV
JScript in Microsoft Internet Explorer allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.
Affected: Internet Explorer
Added to CISA KEV
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts.
Affected: Windows
Added to CISA KEV
The kernel in Microsoft Windows allows local users to gain privileges via a crafted application.
Affected: Windows
Added to CISA KEV
The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application.
Affected: Client-Server Run-time Subsystem (CSRSS)
Added to CISA KEV
The Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.
Affected: Internet Explorer
Added to CISA KEV
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.
Affected: Edge
Added to CISA KEV
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.
Affected: Edge
Added to CISA KEV
Microsoft Edge and Internet Explorer have a type confusion vulnerability in mshtml.dll, which allows remote code execution.
Affected: Edge and Internet Explorer
Added to CISA KEV
Microsoft Internet Explorer allow remote attackers to obtain sensitive information from process memory via a crafted web site.
Affected: Internet Explorer
Added to CISA KEV
Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.
Affected: Windows
Added to CISA KEV
The collection starts with 90 days of Microsoft updates and CISA additions, plus older Microsoft vulnerabilities still listed by CISA. Older entries do not imply that a product remains supported. Counts describe this collection, not every vulnerability or any customer environment.
Last successful check: October 9, 2026
Last successful check: October 9, 2026
Griffin Technology Partners managed customers may receive additional environment-specific security guidance and remediation assistance through their managed services relationship.
Security bulletins are provided for informational purposes and compiled from authoritative public sources. Vulnerability applicability varies by environment. Validate affected products, configuration, compatibility requirements, and vendor guidance before making production changes.
