Skip to main content
Griffin Technology PartnersGTP

Public security advisories

GTP Security Intelligence

Current vulnerabilities, known exploitation, Microsoft security updates, and practical guidance from Griffin Technology Partners.

Primary sources

Microsoft Security Response Center
CISA Known Exploited Vulnerabilities

Subscribe via RSS
Known exploited501Public exploitation evidenceCritical589Highest vendor severityHigh severity2,780Includes MSRC ImportantRecently updated176Updated or KEV-added in 7 days

Vulnerability intelligence

Security bulletins

Last collection: October 16, 2026
Six-hour refresh · Public-source information only

Showing the most recent saved intelligence. One or more sources are awaiting a successful refresh; source dates are listed below.

7,894 bulletins · Page 122 of 329

JSON feed
Medium
CVE-2026-63074Microsoft

CMP Indefinite Cache Growth of ExtraCerts

Review the authoritative advisory for the vulnerability description and applicability.

CVSS
5.9
Update availability
Security update available

Affected: azl3 cloud-hypervisor 51.1.101-2 on Azure Linux 3.0 · azl3 edk2 20240524git3e722403cd16-18 on Azure Linux 3.0 · +7 more

Updated

View technical details for CVE-2026-63074MSRC
Medium
CVE-2026-56135Microsoft

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap memory in…

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted directory.

CVSS
6.5
Update availability
Security update available

Affected: azl3 ntfs-3g 2022.10.3-3 on Azure Linux 3.0 · azl3 ntfs-3g 2022.10.3-4 on Azure Linux 3.0

Updated

View technical details for CVE-2026-56135MSRC
Medium
CVE-2026-56136Microsoft

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an…

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name.

CVSS
7.1
Update availability
Security update available

Affected: azl3 ntfs-3g 2022.10.3-3 on Azure Linux 3.0 · azl3 ntfs-3g 2022.10.3-4 on Azure Linux 3.0

Updated

View technical details for CVE-2026-56136MSRC
Low
CVE-2026-73281Microsoft

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys.

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.

CVSS
3.5
Update availability
Security update available

Affected: azl3 openssh 9.8p1-10 on Azure Linux 3.0 · azl3 openssh 9.8p1-9 on Azure Linux 3.0

Updated

View technical details for CVE-2026-73281MSRC

Sources & coverage

The collection starts with 90 days of Microsoft updates and CISA additions, plus older Microsoft vulnerabilities still listed by CISA. Older entries do not imply that a product remains supported. Counts describe this collection, not every vulnerability or any customer environment.

Microsoft Security Response Center (opens in a new tab)

Last successful check: October 13, 2026

CISA Known Exploited Vulnerabilities (opens in a new tab)

Last successful check: October 16, 2026

Managed by GTP?

Griffin Technology Partners managed customers may receive additional environment-specific security guidance and remediation assistance through their managed services relationship.

Contact GTPManaged Security Services

Security bulletins are provided for informational purposes and compiled from authoritative public sources. Vulnerability applicability varies by environment. Validate affected products, configuration, compatibility requirements, and vendor guidance before making production changes.