Public security advisories
Current vulnerabilities, known exploitation, Microsoft security updates, and practical guidance from Griffin Technology Partners.
Primary sources
Microsoft Security Response Center
CISA Known Exploited Vulnerabilities
Vulnerability intelligence
Last collection: October 9, 2026
Six-hour refresh · Public-source information only
494 bulletins · Page 21 of 21
JSON feedMicrosoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution.
Affected: Windows
Added to CISA KEV
Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.
Affected: Windows
Added to CISA KEV
Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption.
Affected: Windows
Added to CISA KEV
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.
Affected: Exchange Server
Added to CISA KEV
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.
Affected: Exchange Server
Added to CISA KEV
Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform remote code execution with SYSTEM privileges. The vulnerability is also known under the moniker of PrintNightmare.
Affected: Windows
Added to CISA KEV
Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.
Affected: Windows
Added to CISA KEV
Microsoft Windows Update Medic Service contains an unspecified vulnerability that allows for privilege escalation.
Affected: Windows
Added to CISA KEV
Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.
Affected: Windows
Added to CISA KEV
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability that allows for privilege escalation.
Affected: Open Management Infrastructure (OMI)
Added to CISA KEV
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.
Affected: Open Management Infrastructure (OMI)
Added to CISA KEV
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.
Affected: Open Management Infrastructure (OMI)
Added to CISA KEV
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.
Affected: Open Management Infrastructure (OMI)
Added to CISA KEV
Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution.
Affected: MSHTML
Added to CISA KEV
The collection starts with 90 days of Microsoft updates and CISA additions, plus older Microsoft vulnerabilities still listed by CISA. Older entries do not imply that a product remains supported. Counts describe this collection, not every vulnerability or any customer environment.
Last successful check: October 9, 2026
Last successful check: October 9, 2026
Griffin Technology Partners managed customers may receive additional environment-specific security guidance and remediation assistance through their managed services relationship.
Security bulletins are provided for informational purposes and compiled from authoritative public sources. Vulnerability applicability varies by environment. Validate affected products, configuration, compatibility requirements, and vendor guidance before making production changes.
