EUVD-2026-73395

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

EUVD-2026-73394

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-68778

CVE-2026-68778 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, reflecting high confidential...

CVE-2026-68779

CVE-2026-68779 is an out-of-bounds read in Microsoft SQL Server that allows an authorized (low-privilege) attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , indicating a high confidentiality impact with no int...

CVE-2026-68777

CVE-2026-68777 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The CVSS 3.1 base score is 6.5 (Medium) with high confidentiality impact but no integrity or availability impact. CISA's SSVC assessment rates e...

CVE-2026-68776

CVE-2026-68776 is an information disclosure vulnerability in Microsoft SQL Server caused by a use of uninitialized resource . An authorized attacker can exploit this over a network to disclose sensitive information. The CNA-assigned CVSS 3.1 score is 6.5 (Medium) with the vector AV:N/AC:L/PR:L/UI...

EUVD-2026-73392

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...

EUVD-2026-73391

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73390

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67648

Microsoft SQL Server is affected by a use of uninitialized resource vulnerability that allows an authorized attacker (low privileges) to disclose information over a network . The CVSS 3.1 base score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating high confidential...

CVE-2026-68775

Microsoft SQL Server is affected by a heap-based buffer overflow vulnerability that allows an authorized attacker (with low privileges) to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high impa...

EUVD-2026-73388

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network...

EUVD-2026-73389

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67642

Microsoft SQL Server is affected by a heap-based buffer overflow that allows an authorized attacker (low privileges required) to achieve remote code execution over the network. The vulnerability is rated CVSS 3.1 8.8 (High) with high impact to confidentiality, integrity, and availability. CISA's ...

CVE-2026-67641

Microsoft SQL Server is affected by an integer overflow or wraparound vulnerability that allows an authorized attacker (low privileges) to trigger a denial of service over a network with low complexity and no user interaction. The CVSS 3.1 score is 6.5 (Medium) , with the primary impact on availa...

EUVD-2026-73387

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67639

CVE-2026-67639 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (HIGH) with full impact to confidentiality, integrity, and availability. No exploit availabili...

CVE-2026-67393

CVE-2026-67393 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The vulnerability is classified as information disclosure with a CVSS 3.1 base score of 6.5 (Medium) , requiring low privileges and no user interac...

CVE-2026-67638

Microsoft SQL Server is affected by a heap-based buffer overflow that allows an authorized (low-privilege) attacker to execute code over the network, resulting in a Remote Code Execution vulnerability. The CVSS 3.1 score is 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, sourced by Mi...

EUVD-2026-73386

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...