Skip to main content
Griffin Technology PartnersGTP

Public security advisories

GTP Security Intelligence

Current vulnerabilities, known exploitation, Microsoft security updates, and practical guidance from Griffin Technology Partners.

Primary sources

Microsoft Security Response Center
CISA Known Exploited Vulnerabilities

Subscribe via RSS
Known exploited511Public exploitation evidenceCritical706Highest vendor severityHigh severity4,344Includes MSRC ImportantRecently updated1,856Updated or KEV-added in 7 days

Vulnerability intelligence

Security bulletins

Last collection: October 24, 2026
Six-hour refresh · Public-source information only

Showing the most recent saved intelligence. One or more sources are awaiting a successful refresh; source dates are listed below.

10,727 bulletins · Page 241 of 447

JSON feed
Severity not suppliedKnown exploited
CVE-2026-76461Cisco

Cisco Secure Email Gateway SQL Injection Vulnerability

Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.

CVSS
Not supplied
Update availability
Patch status unknown

Affected: Secure Email Gateway

Added to CISA KEV

View technical details for CVE-2026-76461CISA
Medium
CVE-2026-63074Microsoft

CMP Indefinite Cache Growth of ExtraCerts

Review the authoritative advisory for the vulnerability description and applicability.

CVSS
5.9
Update availability
Security update available

Affected: azl3 cloud-hypervisor 51.1.101-2 on Azure Linux 3.0 · azl3 edk2 20240524git3e722403cd16-18 on Azure Linux 3.0 · +7 more

Updated

View technical details for CVE-2026-63074MSRC
Medium
CVE-2026-56135Microsoft

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap memory in…

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted directory.

CVSS
6.5
Update availability
Security update available

Affected: azl3 ntfs-3g 2022.10.3-3 on Azure Linux 3.0 · azl3 ntfs-3g 2022.10.3-4 on Azure Linux 3.0

Updated

View technical details for CVE-2026-56135MSRC
Medium
CVE-2026-56136Microsoft

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an…

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name.

CVSS
7.1
Update availability
Security update available

Affected: azl3 ntfs-3g 2022.10.3-3 on Azure Linux 3.0 · azl3 ntfs-3g 2022.10.3-4 on Azure Linux 3.0

Updated

View technical details for CVE-2026-56136MSRC

Sources & coverage

The collection starts with 90 days of Microsoft updates and CISA additions, plus older Microsoft vulnerabilities still listed by CISA. Older entries do not imply that a product remains supported. Counts describe this collection, not every vulnerability or any customer environment.

Microsoft Security Response Center (opens in a new tab)

Last successful check: October 24, 2026

CISA Known Exploited Vulnerabilities (opens in a new tab)

Last successful check: October 24, 2026

Managed by GTP?

Griffin Technology Partners managed customers may receive additional environment-specific security guidance and remediation assistance through their managed services relationship.

Contact GTPManaged Security Services

Security bulletins are provided for informational purposes and compiled from authoritative public sources. Vulnerability applicability varies by environment. Validate affected products, configuration, compatibility requirements, and vendor guidance before making production changes.