5693 matches found
CVE-2026-66814
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-65669
Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-47297
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...
EUVD-2026-73823
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73824
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-77481
CVE-2026-77481 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker (low privileges required) to achieve remote code execution over a network . The CVSS 3.1 base score is 8.8 (HIGH) , with high impact to confidentiality, integrity, and availability, and no us...
CVE-2026-67645
CVE-2026-67645 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker to disclose information over a network . The CVSS 3.1 base score is 6.5 (MEDIUM) , reflecting low complexity, low privileges required, and high confidentiality impact with no integrity or availabili...
EUVD-2026-73822
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67624
CVE-2026-67624 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker (low privileges) to disclose information over a network. The vulnerability is rated CVSS 6.5 (Medium) with no integrity or availability impact. CISA's SSVC assessment indicates no known exploitation...
EUVD-2026-73814
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-67369
CVE-2026-67369 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The vulnerability requires low privileges and has a CVSS 3.1 score of 6.5 (MEDIUM) with high confidentiality impact but no integrity or availability impact. C...
EUVD-2026-73815
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-66819
CVE-2026-66819 is an SQL injection vulnerability in Microsoft SQL Server , caused by improper neutralization of special elements used in SQL commands. An authorized attacker can exploit it over a network to elevate privileges , with a CVSS 3.1 score of 8.8 (HIGH) and impacts rated High for confid...
EUVD-2026-73809
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-78456
CVE-2026-78456 affects Microsoft SQL Server and is caused by a heap-based buffer overflow that allows an authorized attacker (low privileges required) to achieve remote code execution over the network. The CVSS v3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflect...
EUVD-2026-73794
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network...
CVE-2026-69562
CVE-2026-69562 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an unauthorized, remote attacker to disclose information over a network. The attack vector is network-based with low complexity, requires no prior privileges, but does require user interaction . The impact i...
EUVD-2026-73789
Integer underflow wrap or wraparound in SQL Server allows an authorized attacker to disclose information locally...
CVE-2026-77488
Microsoft SQL Server is affected by an integer underflow (wrap or wraparound) that allows an authorized local attacker to disclose information. The flaw requires low privileges and no user interaction, with a CVSS 3.1 score of 5.5 (MEDIUM) — high confidentiality impact but no integrity or availab...