Public security advisories
Current vulnerabilities, known exploitation, Microsoft security updates, and practical guidance from Griffin Technology Partners.
Primary sources
Microsoft Security Response Center
CISA Known Exploited Vulnerabilities
Vulnerability intelligence
Last collection: October 9, 2026
Six-hour refresh · Public-source information only
351 bulletins · Page 14 of 15
JSON feedReview the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 python-pip 24.2-10 on Azure Linux 3.0 · azl3 python-virtualenv 20.36.1-6 on Azure Linux 3.0
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 php 8.3.33-1 on Azure Linux 3.0 · azl3 python-jwt 2.13.0-1 on Azure Linux 3.0 · +2 more
Updated
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.
Affected: azl3 qemu 10.1.0-1 on Azure Linux 3.0
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 libsoup 3.4.4-16 on Azure Linux 3.0
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 libsoup 3.4.4-16 on Azure Linux 3.0
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 libsoup 3.4.4-16 on Azure Linux 3.0
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 libsoup 3.4.4-16 on Azure Linux 3.0
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 libsoup 3.4.4-16 on Azure Linux 3.0
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 libsoup 3.4.4-16 on Azure Linux 3.0
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 keda 2.14.1-19 on Azure Linux 3.0 · azl3 telegraf 1.31.0-33 on Azure Linux 3.0
Updated
iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperf_stream; fixed in 3.22.
Affected: azl3 python-jwt 2.13.0-1 on Azure Linux 3.0
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 cloud-hypervisor 52.0.152-1 on Azure Linux 3.0 · azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0 · +4 more
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 cloud-hypervisor 52.0.152-1 on Azure Linux 3.0 · azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0 · +4 more
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 cloud-hypervisor 52.0.152-1 on Azure Linux 3.0 · azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0 · +3 more
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 cloud-hypervisor 52.0.152-1 on Azure Linux 3.0 · azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0 · +1 more
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 cloud-hypervisor 52.0.152-1 on Azure Linux 3.0 · azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0 · +3 more
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 cloud-hypervisor 52.0.152-1 on Azure Linux 3.0 · azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0 · +4 more
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 cloud-hypervisor 52.0.152-1 on Azure Linux 3.0 · azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0 · +1 more
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 cloud-hypervisor 52.0.152-1 on Azure Linux 3.0 · azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0 · +3 more
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 cloud-hypervisor 52.0.152-1 on Azure Linux 3.0 · azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0 · +3 more
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 cloud-hypervisor 52.0.152-1 on Azure Linux 3.0 · azl3 edk2 20240524git3e722403cd16-20 on Azure Linux 3.0 · +6 more
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 cloud-hypervisor 52.0.152-1 on Azure Linux 3.0 · azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0 · +3 more
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 cloud-hypervisor 52.0.152-1 on Azure Linux 3.0 · azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0 · +2 more
Updated
Review the authoritative advisory for the vulnerability description and applicability.
Affected: azl3 thrift 0.24.0-1 on Azure Linux 3.0
Updated
The collection starts with 90 days of Microsoft updates and CISA additions, plus older Microsoft vulnerabilities still listed by CISA. Older entries do not imply that a product remains supported. Counts describe this collection, not every vulnerability or any customer environment.
Last successful check: October 9, 2026
Last successful check: October 9, 2026
Griffin Technology Partners managed customers may receive additional environment-specific security guidance and remediation assistance through their managed services relationship.
Security bulletins are provided for informational purposes and compiled from authoritative public sources. Vulnerability applicability varies by environment. Validate affected products, configuration, compatibility requirements, and vendor guidance before making production changes.
