Skip to main content
Griffin Technology PartnersGTP

Public security advisories

GTP Security Intelligence

Current vulnerabilities, known exploitation, Microsoft security updates, and practical guidance from Griffin Technology Partners.

Primary sources

Microsoft Security Response Center
CISA Known Exploited Vulnerabilities

Subscribe via RSS

Vulnerability intelligence

Security bulletins

Last collection: October 21, 2026
Six-hour refresh · Public-source information only

Showing the most recent saved intelligence. One or more sources are awaiting a successful refresh; source dates are listed below.

7,902 bulletins · Page 182 of 330

JSON feed
Medium
CVE-2026-76957Microsoft

libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks.

libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412.

CVSS
4.9
Update availability
Patch status unknown

Affected: azl3 cmake 3.30.3-15 on Azure Linux 3.0 · azl3 expat 2.8.2-1 on Azure Linux 3.0 · +1 more

Updated

Severity not suppliedKnown exploited
CVE-2026-21962Oracle

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in accessible data.

CVSS
Not supplied
Update availability
Patch status unknown

Affected: HTTP Server and Oracle Weblogic Server Proxy Plug-in

Added to CISA KEV

Sources & coverage

The collection starts with 90 days of Microsoft updates and CISA additions, plus older Microsoft vulnerabilities still listed by CISA. Older entries do not imply that a product remains supported. Counts describe this collection, not every vulnerability or any customer environment.

Microsoft Security Response Center (opens in a new tab)

Last successful check: October 13, 2026

CISA Known Exploited Vulnerabilities (opens in a new tab)

Last successful check: October 21, 2026

Managed by GTP?

Griffin Technology Partners managed customers may receive additional environment-specific security guidance and remediation assistance through their managed services relationship.

Security bulletins are provided for informational purposes and compiled from authoritative public sources. Vulnerability applicability varies by environment. Validate affected products, configuration, compatibility requirements, and vendor guidance before making production changes.