CVE-2026-54116 Microsoft SQL Server Information Disclosure Vulnerability

...

CVE-2026-50468 Microsoft SQL Server Information Disclosure Vulnerability

...

CVE-2026-50468 Microsoft SQL Server Information Disclosure Vulnerability

...

CVE-2026-54116 Microsoft SQL Server Information Disclosure Vulnerability

...

CVE-2026-47295 Microsoft SQL Server Elevation of Privilege Vulnerability

...

CVE-2026-47295

CVE-2026-47295 describes an elevation-of-privilege vulnerability in Microsoft SQL Server caused by improper neutralization of special elements used in SQL commands (SQL injection). The issue can be exploited by an authenticated attacker over a network to gain elevated privileges, with impact on c...

CVE-2026-55002

Technical details about CVE-2026-55002 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-55002 Microsoft SQL Server Elevation of Privilege Vulnerability

...

CVE-2026-54118 Microsoft SQL Server Remote Code Execution Vulnerability

...

CVE-2026-54118

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-54117

Microsoft SQL Server is vulnerable to a deserialization-of-untrusted-data flaw (CWE-502) allowing an unauthorized network attacker to execute arbitrary code with no authentication required (CVSS 9.8 critical). Affected products include SQL Server 2016 through 2025, Fabric Data Warehouse, and Powe...

CVE-2026-54117 Microsoft SQL Server Remote Code Execution Vulnerability

...

CVE-2026-54117

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-42990 SQL Server ODBC driver Elevation of Privilege Vulnerability

...

CVE-2026-42990

CVE-2026-42990 affects the SQL Server ODBC driver, where a heap-based buffer overflow enables code execution over the network. The vulnerability is exploitable remotely (network vector) and is rated high severity (CVSS 3.1: 9.8, CRITICAL) with no privileges required and no user interaction. The a...

CVE-2026-47296 Microsoft SQL Server Elevation of Privilege Vulnerability

...

SQL Server ODBC driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...

Microsoft SQL Server Elevation of Privilege Vulnerability

External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-58125

Name of the Vulnerable Software and Affected Versions SQL Server ODBC driver affected versions not specified Description A heap-based buffer overflow in the SQL Server ODBC driver allows an unauthorized remote attacker to execute arbitrary code over a network and achieve elevation of privilege. A...