Skip to main content
Griffin Technology PartnersGTP

Public security advisories

GTP Security Intelligence

Current vulnerabilities, known exploitation, Microsoft security updates, and practical guidance from Griffin Technology Partners.

Primary sources

Microsoft Security Response Center
CISA Known Exploited Vulnerabilities

Subscribe via RSS
Known exploited503Public exploitation evidenceCritical589Highest vendor severityHigh severity2,780Includes MSRC ImportantRecently updated151Updated or KEV-added in 7 days

Vulnerability intelligence

Security bulletins

Last collection: October 19, 2026
Six-hour refresh · Public-source information only

Showing the most recent saved intelligence. One or more sources are awaiting a successful refresh; source dates are listed below.

7,896 bulletins · Page 163 of 329

JSON feed
Medium
CVE-2026-52492Microsoft

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocation and subsequent…

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image

CVSS
5.3
Update availability
Security update available

Affected: azl3 libtiff 4.6.0-14 on Azure Linux 3.0

Updated

View technical details for CVE-2026-52492MSRC

Sources & coverage

The collection starts with 90 days of Microsoft updates and CISA additions, plus older Microsoft vulnerabilities still listed by CISA. Older entries do not imply that a product remains supported. Counts describe this collection, not every vulnerability or any customer environment.

Microsoft Security Response Center (opens in a new tab)

Last successful check: October 13, 2026

CISA Known Exploited Vulnerabilities (opens in a new tab)

Last successful check: October 19, 2026

Managed by GTP?

Griffin Technology Partners managed customers may receive additional environment-specific security guidance and remediation assistance through their managed services relationship.

Contact GTPManaged Security Services

Security bulletins are provided for informational purposes and compiled from authoritative public sources. Vulnerability applicability varies by environment. Validate affected products, configuration, compatibility requirements, and vendor guidance before making production changes.