Skip to main content
Griffin Technology PartnersGTP

Public security advisories

GTP Security Intelligence

Current vulnerabilities, known exploitation, Microsoft security updates, and practical guidance from Griffin Technology Partners.

Primary sources

Microsoft Security Response Center
CISA Known Exploited Vulnerabilities

Subscribe via RSS

Vulnerability intelligence

Security bulletins

Last collection: October 15, 2026
Six-hour refresh · Public-source information only

Showing the most recent saved intelligence. One or more sources are awaiting a successful refresh; source dates are listed below.

7,893 bulletins · Page 105 of 329

JSON feed
Severity not suppliedKnown exploited
CVE-2025-39682Linux

Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability

Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rx_list to bypass the intended recvmsg() record-type handling, potentially causing subsequent TLS records to be processed using incorrect zero-copy and queuing assumptions. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.

CVSS
Not supplied
Update availability
Patch status unknown

Affected: Kernel

Added to CISA KEV

Severity not suppliedKnown exploited
CVE-2025-39964Linux

Linux Kernel Race Condition Vulnerability

Linux Kernel contains a race condition vulnerability which allows concurrent writes to the same AF_ALG socket causing data to be unpredictably interleaved and creating inconsistencies in the socket's internal state.

CVSS
Not supplied
Update availability
Patch status unknown

Affected: Kernel

Added to CISA KEV

MediumKnown exploited
CVE-2026-53266Microsoft

netfilter: bridge: make ebt_snat ARP rewrite writable

Linux Kernel contains an out-of-bounds write vulnerability in the ebtables SNAT target which allows an ARP sender hardware address rewrite to write directly into a nonlinear socket-buffer fragment backed by a splice-imported file page. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.

CVSS
6.8
Update availability
Patch status unknown

Affected: azl3 kernel 6.6.141.1-1 on Azure Linux 3.0

Updated

Critical
CVE-2026-91749Microsoft

Chromium CVE-2026-91749: Use after free

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.

CVSS
9.6
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based)

Updated

High
CVE-2026-91748Microsoft

Chromium CVE-2026-91748: Race condition

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.

CVSS
8.3
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based)

Updated

High
CVE-2026-91747Microsoft

Chromium CVE-2026-91747: Use after free

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.

CVSS
3.1
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based)

Updated

High
CVE-2026-91746Microsoft

Chromium CVE-2026-91746: Integer overflow

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.

CVSS
4.3
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based)

Updated

High
CVE-2026-91744Microsoft

Chromium CVE-2026-91744: Race condition

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.

CVSS
5.3
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based)

Updated

High
CVE-2026-91743Microsoft

Chromium CVE-2026-91743: Race condition

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.

CVSS
8.3
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based)

Updated

Medium
CVE-2026-91742Microsoft

Chromium CVE-2026-91742: Confused deputy

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.

CVSS
4.8
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based)

Updated

High
CVE-2026-91741Microsoft

Chromium CVE-2026-91741: Type confusion

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.

CVSS
8.8
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based)

Updated

High
CVE-2026-91740Microsoft

Chromium CVE-2026-91740: Uninitialized resource

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.

CVSS
4.3
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based)

Updated

Medium
CVE-2026-91739Microsoft

Chromium CVE-2026-91739: Missing authorization

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.

CVSS
4.2
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based)

Updated

Medium
CVE-2026-91738Microsoft

Chromium CVE-2026-91738: Improper input validation

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.

CVSS
9.6
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based)

Updated

High
CVE-2026-91737Microsoft

Chromium CVE-2026-91737: Use after free

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.

CVSS
8.8
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based)

Updated

High
CVE-2026-91736Microsoft

Chromium CVE-2026-91736: Use after free

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.

CVSS
8.8
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based)

Updated

High
CVE-2026-91735Microsoft

Chromium CVE-2026-91735: Incorrect authorization

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.

CVSS
8.3
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based)

Updated

High
CVE-2026-91734Microsoft

Chromium CVE-2026-91734: Incorrect authorization

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.

CVSS
7.4
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based)

Updated

High
CVE-2026-91733Microsoft

Chromium CVE-2026-91733: Improper state validation

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.

CVSS
8.3
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based)

Updated

High
CVE-2026-91731Microsoft

Chromium CVE-2026-91731: Type confusion

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.

CVSS
8.8
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based)

Updated

Medium
CVE-2026-91730Microsoft

Chromium CVE-2026-91730: Incomplete cleanup

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.

CVSS
3.1
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based)

Updated

High
CVE-2026-91729Microsoft

Chromium CVE-2026-91729: Use after free

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases ]( https://chromereleases.googleblog.com/2026 )) for more information.

CVSS
9.6
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based)

Updated

Sources & coverage

The collection starts with 90 days of Microsoft updates and CISA additions, plus older Microsoft vulnerabilities still listed by CISA. Older entries do not imply that a product remains supported. Counts describe this collection, not every vulnerability or any customer environment.

Microsoft Security Response Center (opens in a new tab)

Last successful check: October 13, 2026

CISA Known Exploited Vulnerabilities (opens in a new tab)

Last successful check: October 15, 2026

Managed by GTP?

Griffin Technology Partners managed customers may receive additional environment-specific security guidance and remediation assistance through their managed services relationship.

Security bulletins are provided for informational purposes and compiled from authoritative public sources. Vulnerability applicability varies by environment. Validate affected products, configuration, compatibility requirements, and vendor guidance before making production changes.