Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
9Vendor sources
4,737Advisories collected
2,721Published or updated in 30 days
2,119Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

4,737 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-67630
HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Affected productsMicrosoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2022 for x64-based Systems (GDR)
Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5
Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122768. Install KB5122769.

CVE-2026-67630
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-67629
HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Affected productsMicrosoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2022 for x64-based Systems (GDR)
Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5
Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122768. Install KB5122769.

CVE-2026-67629
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-67624
HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Affected productsMicrosoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32)
Fixed versions15.0.2190.7, 16.0.1200.5, 17.0.1135.8, 15.0.4490.9
Vendor guidance

Install KB5122773. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122768. Install KB5122769.

CVE-2026-67624
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-67393
HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

Affected productsMicrosoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2022 for x64-based Systems (GDR)
Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5
Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122768. Install KB5122769.

CVE-2026-67393
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-67390
HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

Affected productsMicrosoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2022 for x64-based Systems (GDR)
Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5
Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122768. Install KB5122769.

CVE-2026-67390
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-67389
HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Affected productsMicrosoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2025 for x64-based Systems (CU8)
Fixed versions16.0.1200.5, 17.0.1135.8, 16.0.4275.2, 17.0.4085.5
Vendor guidance

Install KB5122771. Install KB5122770. Install KB5122768. Install KB5122769.

CVE-2026-67389
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-67388
HighCVSS 8.8

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU 31)
Fixed versions17.0.4085.5, 14.0.2130.4, 15.0.2190.7, 14.0.3550.4
Vendor guidance

Install KB5122769. Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122768.

CVE-2026-67388
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-67386
HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

Affected productsMicrosoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR)
Fixed versions16.0.4275.2, 17.0.4085.5, 14.0.2130.4, 15.0.2190.7
Vendor guidance

Install KB5122768. Install KB5122769. Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772.

CVE-2026-67386
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-67385
HighCVSS 8.8

Microsoft SQL Server Remote Code Execution Vulnerability

Use after free in SQL Server allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2022 for x64-based Systems (GDR)
Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5
Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122769. Install KB5122768.

CVE-2026-67385
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-67384
HighCVSS 8.8

Microsoft SQL Server Remote Code Execution Vulnerability

Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2022 for x64-based Systems (GDR)
Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5
Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122768. Install KB5122769.

CVE-2026-67384
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-67383
HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.

Affected productsMicrosoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8)
Fixed versions17.0.1135.8, 17.0.4085.5
Vendor guidance

Install KB5122770. Install KB5122769.

CVE-2026-67383
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-67381
HighCVSS 8.8

Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Affected productsMicrosoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR)
Fixed versions16.0.4275.2, 17.0.4085.5, 14.0.2130.4, 15.0.2190.7
Vendor guidance

Install KB5122768. Install KB5122769. Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772.

CVE-2026-67381
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-67380
HighCVSS 8.8

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2022 for x64-based Systems (GDR)
Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5
Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122769. Install KB5122768.

CVE-2026-67380
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-67379
HighCVSS 8.5

Microsoft SQL Server Remote Code Execution Vulnerability

Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (GDR)
Fixed versions17.0.4085.5, 16.0.4275.2, 15.0.2190.7, 16.0.1200.5
Vendor guidance

Install KB5122769. Install KB5122768. Install KB5122773. Install KB5122771. Install KB5122770. Install KB5122772.

CVE-2026-67379
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-67376
HighCVSS 7.5

Microsoft SQL Server Denial of Service Vulnerability

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.

Affected productsMicrosoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2022 for x64-based Systems (GDR)
Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5
Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122769. Install KB5122768.

CVE-2026-67376
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-67373
HighCVSS 8.8

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8)
Fixed versions17.0.1135.8, 17.0.4085.5
Vendor guidance

Install KB5122770. Install KB5122769.

CVE-2026-67373
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-67370
HighCVSS 8.8

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

Affected productsMicrosoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR)
Fixed versions16.0.4275.2, 17.0.4085.5, 14.0.2130.4, 15.0.2190.7
Vendor guidance

Install KB5122768. Install KB5122769. Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772.

CVE-2026-67370
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-67369
HighCVSS 6.5

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Affected productsMicrosoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8)
Fixed versions17.0.1135.8, 17.0.4085.5
Vendor guidance

Install KB5122770. Install KB5122769.

CVE-2026-67369
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-67368
HighCVSS 8.8

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.

Affected productsMicrosoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2022 for x64-based Systems (GDR)
Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5
Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122769. Install KB5122768.

CVE-2026-67368
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-66820
HighCVSS 8.8

SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

Affected productsMicrosoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2022 for x64-based Systems (GDR)
Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5
Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122768. Install KB5122769.

CVE-2026-66820
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-66819
HighCVSS 8.8

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

Affected productsMicrosoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2022 for x64-based Systems (GDR)
Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5
Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122768. Install KB5122769.

CVE-2026-66819
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-66818
HighCVSS 8.8

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.

Affected productsMicrosoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2022 for x64-based Systems (GDR)
Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5
Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122768. Install KB5122769.

CVE-2026-66818
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-66816
HighCVSS 6.5

Microsoft SQL Server Security Feature Bypass Vulnerability

Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.

Affected productsMicrosoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2022 for x64-based Systems (CU 26)
Fixed versions16.0.1200.5, 17.0.1135.8, 17.0.4085.5, 16.0.4275.2
Vendor guidance

Install KB5122771. Install KB5122770. Install KB5122769. Install KB5122768.

CVE-2026-66816
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-66814
HighCVSS 8.8

Microsoft SQL Server Elevation of Privilege Vulnerability

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Affected productsMicrosoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU 31), Microsoft SQL Server 2022 for x64-based Systems (GDR)
Fixed versions14.0.2130.4, 15.0.2190.7, 14.0.3550.4, 16.0.1200.5
Vendor guidance

Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122769. Install KB5122768.

CVE-2026-66814
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

Read how SecurityAlert collects and checks threat intelligence.