Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

16,905Advisories collected

6,325Published or updated in 30 days

7,001Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 173 advisories

CurrentChecked 15 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 38 advisories

CurrentChecked 25 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 26 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 24 advisories

CurrentChecked 30 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 25 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 55 advisories

CurrentChecked 10 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 9 advisories

CurrentChecked 15 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 15,977 advisories

CurrentChecked 29 minutes ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 59 advisories

CurrentChecked 15 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

CurrentChecked 25 minutes ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 437 advisories

CurrentChecked 15 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

16,905 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-68777

Published Sep 8, 2026

HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Affected productsMicrosoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2019 for x64-based Systems (GDR)

Fixed versions14.0.3550.4, 14.0.2130.4, 15.0.4490.9, 15.0.2190.7

Vendor guidance

Install KB5122774. Install KB5122775. Install KB5122772. Install KB5122773. Install KB5122771. Install KB5122770. Install KB5122769. Install KB5122768.

CVE-2026-68777

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-68776

Published Sep 8, 2026

HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

Fixed versions14.0.3550.4, 14.0.2130.4, 15.0.4490.9, 15.0.2190.7

Vendor guidance

Install KB5122774. Install KB5122775. Install KB5122772. Install KB5122773. Install KB5122771. Install KB5122770. Install KB5122769. Install KB5122768.

CVE-2026-68776

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-68775

Published Sep 8, 2026

HighCVSS 8.8

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Fixed versions14.0.3550.4, 14.0.2130.4, 15.0.4490.9, 15.0.2190.7

Vendor guidance

Install KB5122774. Install KB5122775. Install KB5122772. Install KB5122773. Install KB5122771. Install KB5122770. Install KB5122769. Install KB5122768.

CVE-2026-68775

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67648

Published Sep 8, 2026

HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

Fixed versions14.0.3550.4, 14.0.2130.4, 15.0.4490.9, 15.0.2190.7

Vendor guidance

Install KB5122774. Install KB5122775. Install KB5122772. Install KB5122773. Install KB5122771. Install KB5122770. Install KB5122768. Install KB5122769.

CVE-2026-67648

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67645

Published Sep 8, 2026

HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Affected productsMicrosoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2025 for x64-based Systems (GDR)

Fixed versions14.0.3550.4, 15.0.2190.7, 15.0.4490.9, 17.0.1135.8

Vendor guidance

Install KB5122774. Install KB5122773. Install KB5122772. Install KB5122770. Install KB5122775. Install KB5122771. Install KB5122769. Install KB5122768.

CVE-2026-67645

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67642

Published Sep 8, 2026

HighCVSS 8.8

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2025 for x64-based Systems (GDR)

Fixed versions17.0.4085.5, 17.0.1135.8

Vendor guidance

Install KB5122769. Install KB5122770.

CVE-2026-67642

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67641

Published Sep 8, 2026

HighCVSS 6.5

Microsoft SQL Server Denial of Service Vulnerability

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.

Affected productsMicrosoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2022 for x64-based Systems (CU 26)

Fixed versions16.0.1200.5, 17.0.1135.8, 17.0.4085.5, 16.0.4275.2

Vendor guidance

Install KB5122771. Install KB5122770. Install KB5122769. Install KB5122768.

CVE-2026-67641

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67639

Published Sep 8, 2026

HighCVSS 8.8

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2022 for x64-based Systems (GDR)

Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5

Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122768. Install KB5122769.

CVE-2026-67639

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67638

Published Sep 8, 2026

HighCVSS 8.8

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8)

Fixed versions17.0.1135.8, 17.0.4085.5

Vendor guidance

Install KB5122770. Install KB5122769.

CVE-2026-67638

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67633

Published Sep 8, 2026

HighCVSS 6.5

Microsoft SQL Server Denial of Service Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.

Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5

Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122769. Install KB5122768.

CVE-2026-67633

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67630

Published Sep 8, 2026

HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5

Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122768. Install KB5122769.

CVE-2026-67630

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67629

Published Sep 8, 2026

HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5

Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122768. Install KB5122769.

CVE-2026-67629

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67624

Published Sep 8, 2026

HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Affected productsMicrosoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32)

Fixed versions15.0.2190.7, 16.0.1200.5, 17.0.1135.8, 15.0.4490.9

Vendor guidance

Install KB5122773. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122768. Install KB5122769.

CVE-2026-67624

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67393

Published Sep 8, 2026

HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5

Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122768. Install KB5122769.

CVE-2026-67393

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67390

Published Sep 8, 2026

HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5

Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122768. Install KB5122769.

CVE-2026-67390

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67389

Published Sep 8, 2026

HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Affected productsMicrosoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2025 for x64-based Systems (CU8)

Fixed versions16.0.1200.5, 17.0.1135.8, 16.0.4275.2, 17.0.4085.5

Vendor guidance

Install KB5122771. Install KB5122770. Install KB5122768. Install KB5122769.

CVE-2026-67389

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67388

Published Sep 8, 2026

HighCVSS 8.8

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU 31)

Fixed versions17.0.4085.5, 14.0.2130.4, 15.0.2190.7, 14.0.3550.4

Vendor guidance

Install KB5122769. Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122768.

CVE-2026-67388

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67386

Published Sep 8, 2026

HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

Affected productsMicrosoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR)

Fixed versions16.0.4275.2, 17.0.4085.5, 14.0.2130.4, 15.0.2190.7

Vendor guidance

Install KB5122768. Install KB5122769. Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772.

CVE-2026-67386

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67385

Published Sep 8, 2026

HighCVSS 8.8

Microsoft SQL Server Remote Code Execution Vulnerability

Use after free in SQL Server allows an authorized attacker to execute code over a network.

Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5

Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122769. Install KB5122768.

CVE-2026-67385

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67384

Published Sep 8, 2026

HighCVSS 8.8

Microsoft SQL Server Remote Code Execution Vulnerability

Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.

Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5

Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122768. Install KB5122769.

CVE-2026-67384

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67383

Published Sep 8, 2026

HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.

Affected productsMicrosoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8)

Fixed versions17.0.1135.8, 17.0.4085.5

Vendor guidance

Install KB5122770. Install KB5122769.

CVE-2026-67383

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67381

Published Sep 8, 2026

HighCVSS 8.8

Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Fixed versions16.0.4275.2, 17.0.4085.5, 14.0.2130.4, 15.0.2190.7

Vendor guidance

Install KB5122768. Install KB5122769. Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772.

CVE-2026-67381

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67380

Published Sep 8, 2026

HighCVSS 8.8

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5

Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122769. Install KB5122768.

CVE-2026-67380

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67379

Published Sep 8, 2026

HighCVSS 8.5

Microsoft SQL Server Remote Code Execution Vulnerability

Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (GDR)

Fixed versions17.0.4085.5, 16.0.4275.2, 15.0.2190.7, 16.0.1200.5

Vendor guidance

Install KB5122769. Install KB5122768. Install KB5122773. Install KB5122771. Install KB5122770. Install KB5122772.

CVE-2026-67379

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources