5693 matches found
EUVD-2026-73788
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network...
CVE-2026-77485
CVE-2026-77485 is a use-after-free vulnerability in Microsoft SQL Server that allows an authorized attacker to elevate privileges locally . The flaw requires local access and low privileges, with high attack complexity and no user interaction, scoring CVSS 3.1 7.0 (HIGH) with full impact on confi...
EUVD-2026-73787
Use after free in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-77487
CVE-2026-77487 is an improper access control vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to elevate privileges over a network with low complexity and no user interaction. The CVSS 3.1 base score is 8.8 (HIGH) , with high impact to confidentia...
EUVD-2026-73786
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73785
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-77484
CVE-2026-77484 is a remote code execution vulnerability in Microsoft SQL Server caused by deserialization of untrusted data , allowing an authorized attacker to execute code over a network. The CVSS v3.1 score is 8.8 (High) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating network-explo...
EUVD-2026-73784
Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-77483
CVE-2026-77483 affects Microsoft SQL Server and involves a weak authentication mechanism that allows an authorized attacker (low privileges required) to elevate privileges over a network . The CVSS 3.1 score is 8.8 (HIGH) with vectors for network attack, low complexity, no user interaction, and h...
EUVD-2026-73783
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-77480
SQL Server is affected by an elevation of privilege vulnerability caused by insufficient granularity of access control . An authorized attacker with low privileges can exploit the flaw over a network to elevate their access, resulting in high impact to confidentiality, integrity, and availability...
CVE-2026-73028
Microsoft SQL Server is affected by an improper access control vulnerability (CVE-2026-73028) that allows an authorized attacker to elevate privileges over a network . The vulnerability is rated HIGH severity with a CVSS 3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating low ...
EUVD-2026-73782
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-47297
Microsoft SQL Server is affected by a deserialization of untrusted data vulnerability that allows an unauthorized attacker to achieve remote code execution over a network . The vulnerability requires no prior authentication or user interaction but carries a High attack complexity , resulting in a...
EUVD-2026-73644
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...
CVE-2026-68780
CVE-2026-68780 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network. The CVSS 3.1 score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , reflecting high confidentiality impact with no ...
EUVD-2026-73396
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-68778
CVE-2026-68778 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, reflecting high confidential...
CVE-2026-68779
CVE-2026-68779 is an out-of-bounds read in Microsoft SQL Server that allows an authorized (low-privilege) attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , indicating a high confidentiality impact with no int...