Public security advisories
Current vulnerabilities, known exploitation, Microsoft security updates, and practical guidance from Griffin Technology Partners.
Primary sources
Microsoft Security Response Center
CISA Known Exploited Vulnerabilities
Vulnerability intelligence
Last collection: October 9, 2026
Six-hour refresh · Public-source information only
494 bulletins · Page 20 of 21
JSON feedMicrosoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.
Affected: Windows
Added to CISA KEV
Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user.
Affected: Internet Explorer
Added to CISA KEV
Microsoft Windows contains a spoofing vulnerability when Windows incorrectly validates file signatures, allowing an attacker to bypass security features and load improperly signed files.
Affected: Windows
Added to CISA KEV
Microsoft's Netlogon Remote Protocol (MS-NRPC) contains a privilege escalation vulnerability when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller. An attacker who successfully exploits the vulnerability could run a specially crafted application on a device on the network. The vulnerability is also known under the moniker of Zerologon.
Affected: Netlogon
Added to CISA KEV
Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.
Affected: Windows
Added to CISA KEV
Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution.
Affected: Exchange Server
Added to CISA KEV
Microsoft Defender contains an unspecified vulnerability that allows for remote code execution.
Affected: Defender
Added to CISA KEV
Microsoft Windows Print Spooler contains an unspecified vulnerability that allows for remote code execution.
Affected: Windows
Added to CISA KEV
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
Affected: Win32k
Added to CISA KEV
Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.
Affected: Internet Explorer
Added to CISA KEV
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.
Affected: Exchange Server
Added to CISA KEV
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.
Affected: Exchange Server
Added to CISA KEV
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.
Affected: Exchange Server
Added to CISA KEV
Microsoft Office contains an unspecified vulnerability that allows for remote code execution.
Affected: Office
Added to CISA KEV
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.
Affected: Exchange Server
Added to CISA KEV
Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution.
Affected: Internet Explorer
Added to CISA KEV
Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.
Affected: Win32k
Added to CISA KEV
Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.
Affected: Enhanced Cryptographic Provider
Added to CISA KEV
Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.
Affected: Enhanced Cryptographic Provider
Added to CISA KEV
Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.
Affected: Exchange Server
Added to CISA KEV
Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.
Affected: Windows
Added to CISA KEV
Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.
Affected: Windows
Added to CISA KEV
Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.
Affected: Windows
Added to CISA KEV
Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.
Affected: Windows
Added to CISA KEV
The collection starts with 90 days of Microsoft updates and CISA additions, plus older Microsoft vulnerabilities still listed by CISA. Older entries do not imply that a product remains supported. Counts describe this collection, not every vulnerability or any customer environment.
Last successful check: October 9, 2026
Last successful check: October 9, 2026
Griffin Technology Partners managed customers may receive additional environment-specific security guidance and remediation assistance through their managed services relationship.
Security bulletins are provided for informational purposes and compiled from authoritative public sources. Vulnerability applicability varies by environment. Validate affected products, configuration, compatibility requirements, and vendor guidance before making production changes.
