CVE tracking · CISA known exploited
Security Briefs: vulnerability alerts in plain English
We track CISA KEV, Microsoft advisories, and FBI alerts, then tell you what’s affected and whether attackers are already using it.
Alerts tracked
5188
Security flaws we track for Upstate SC businesses.
Known exploited
554
On CISA’s list of vulnerabilities attackers are actively using. Patch these first.
New exploited this month
8
Fresh additions to that CISA list since the first of the month.Feeds last synced Oct 20, 2026, 6:01 AM UTC.
What do these terms mean?
What is a CVE?
A CVE (Common Vulnerabilities and Exposures) is a public tracking number for a specific security flaw in software or hardware, similar to a SKU for a bug.
What is the CISA Known Exploited Vulnerabilities (KEV) catalog?
The CISA KEV catalog is the U.S. government’s short list of vulnerabilities that attackers are actively exploiting in the wild.
Who publishes Security Briefs on PremierePC?
PremierePC tracks alerts from CISA KEV, Microsoft MSRC, FBI IC3 industry advisories, and other U.S. feeds, then summarizes what each one means for Upstate SC businesses.
How often are Security Briefs updated?
Feeds sync automatically on a schedule. We publish new KEV entries, Microsoft advisories, and FBI alerts as they appear in the source catalogs.
Showing 24 of 5188 alerts.
Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials
Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials — FBI IC3 industry advisory relevant to cyber risk. PremierePC monitors federal alerts for Upstate SC businesses. Read the source link for full guidance or open a ticket if you want help assessing impact.
- Vendor:FBI IC3
Windows Raw Image Extension Remote Code Execution vulnerability
Windows Raw Image Extension Remote Code Execution vulnerability (CVE-2026-96202) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Edge (Chromium-based) Remote Code Execution vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution vulnerability (CVE-2026-96199) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Edge (Chromium-based) Remote Code Execution vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution vulnerability (CVE-2026-96198) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Edge (Chromium-based) Remote Code Execution vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution vulnerability (CVE-2026-85898) was added to Microsoft’s security update guidance. <p>Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Edge (Chromium-based) Remote Code Execution vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution vulnerability (CVE-2026-85897) was added to Microsoft’s security update guidance. <p>Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Edge (Chromium-based) Remote Code Execution vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution vulnerability (CVE-2026-85890) was added to Microsoft’s security update guidance. <p>Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Edge (Chromium-based) Remote Code Execution vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution vulnerability (CVE-2026-83831) was added to Microsoft’s security update guidance. <p>Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Power Apps Remote Code Execution vulnerability
Microsoft Power Apps Remote Code Execution vulnerability (CVE-2026-70213) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Windows Kernel Denial of Service vulnerability
Windows Kernel Denial of Service vulnerability (CVE-2026-70170) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Fortinet Multiple Products Path Traversal Vulnerability
Fortinet Multiple Products is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-61624). FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands. CISA remediation due date: 2026-10-19. If you need help checking exposure, call (864) 335-9223.
Scammers Exploit 2026 U.S. Midterm Election to Perpetrate Multiple Fraud Schemes
Scammers Exploit 2026 U.S. Midterm Election to Perpetrate Multiple Fraud Schemes — FBI IC3 industry advisory relevant to cyber risk. PremierePC monitors federal alerts for Upstate SC businesses. Read the source link for full guidance or open a ticket if you want help assessing impact.
- Vendor:FBI IC3
FBI Warns Voters on Election Crimes Ahead of the November 2026 Midterm Election
FBI Warns Voters on Election Crimes Ahead of the November 2026 Midterm Election — FBI IC3 industry advisory relevant to cyber risk. PremierePC monitors federal alerts for Upstate SC businesses. Read the source link for full guidance or open a ticket if you want help assessing impact.
- Vendor:FBI IC3
FBI Cautions About Threats to Election Workers Ahead of the November 2026 Midterm Election
FBI Cautions About Threats to Election Workers Ahead of the November 2026 Midterm Election — FBI IC3 industry advisory relevant to cyber risk. PremierePC monitors federal alerts for Upstate SC businesses. Read the source link for full guidance or open a ticket if you want help assessing impact.
- Vendor:FBI IC3
Microsoft Identity Web Elevation of Privilege vulnerability
Microsoft Identity Web Elevation of Privilege vulnerability (CVE-2026-80092) was added to Microsoft’s security update guidance. <p>Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Authentication Library (MSAL) for Node.js Information Disclosure vulnerability
Microsoft Authentication Library (MSAL) for Node.js Information Disclosure vulnerability (CVE-2026-109461) was added to Microsoft’s security update guidance. <p>Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.</p> If you need help checking exposure, call (864) 335-9223.
Microsoft Office PowerPoint Information Disclosure vulnerability
Microsoft Office PowerPoint Information Disclosure vulnerability (CVE-2026-108455) was added to Microsoft’s security update guidance. Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not… If you need help checking exposure, call (864) 335-9223.
Microsoft Office PowerPoint Information Disclosure vulnerability
Microsoft Office PowerPoint Information Disclosure vulnerability (CVE-2026-108454) was added to Microsoft’s security update guidance. Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not… If you need help checking exposure, call (864) 335-9223.
Microsoft Office PowerPoint Information Disclosure vulnerability
Microsoft Office PowerPoint Information Disclosure vulnerability (CVE-2026-108453) was added to Microsoft’s security update guidance. Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not… If you need help checking exposure, call (864) 335-9223.
Microsoft Office SharePoint Remote Code Execution vulnerability
Microsoft Office SharePoint Remote Code Execution vulnerability (CVE-2026-108452) was added to Microsoft’s security update guidance. Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not… If you need help checking exposure, call (864) 335-9223.
Microsoft Office Word Remote Code Execution vulnerability
Microsoft Office Word Remote Code Execution vulnerability (CVE-2026-108451) was added to Microsoft’s security update guidance. Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not… If you need help checking exposure, call (864) 335-9223.
Microsoft Office Word Remote Code Execution vulnerability
Microsoft Office Word Remote Code Execution vulnerability (CVE-2026-108450) was added to Microsoft’s security update guidance. Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not… If you need help checking exposure, call (864) 335-9223.
Microsoft Office Word Remote Code Execution vulnerability
Microsoft Office Word Remote Code Execution vulnerability (CVE-2026-108449) was added to Microsoft’s security update guidance. Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not… If you need help checking exposure, call (864) 335-9223.
Microsoft Office Outlook Remote Code Execution vulnerability
Microsoft Office Outlook Remote Code Execution vulnerability (CVE-2026-108448) was added to Microsoft’s security update guidance. Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not… If you need help checking exposure, call (864) 335-9223.