5693 matches found
EUVD-2026-73320
Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-73029
CVE-2026-73029 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network. The CVSS 3.1 base score is 6.5 (MEDIUM) with high confidentiality impact but no integrity or availability impact. CISA's ...
CVE-2026-65669
CVE-2026-65669 is an elevation of privilege vulnerability in Microsoft SQL Server caused by improper neutralization of special elements in output used by a downstream component (injection). An unauthorized attacker can exploit it over a network with low complexity and no prior privileges , though...
CVE-2026-68786
CVE-2026-68786 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker (low privileges required) to achieve remote code execution over a network with no user interaction. The assigned CVSS 3.1 score is 8.8 (HIGH) with impacts of High across confidentiality, inte...
EUVD-2026-73317
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-67643
CVE-2026-67643 is a heap-based buffer overflow in Microsoft SQL Server that allows an unauthorized attacker to achieve remote code execution over a network. Microsoft assigned a CVSS 3.1 score of 9.8 (Critical) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. CISA's SSVC assessment rates exp...
EUVD-2026-73318
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-67636
CVE-2026-67636 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an unauthorized attacker to achieve remote code execution over a network. The CNA-assigned CVSS 3.1 score is 9.0 (CRITICAL) , with a network attack vector, high complexity, no required privileges, changed sc...
EUVD-2026-73316
Out-of-bounds read in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-73314
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67389
Microsoft SQL Server is affected by an out-of-bounds read vulnerability that allows an authorized attacker (low privileges required) to disclose information over a network . The CVSS v3.1 base score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, reflecting high confidential...
CVE-2026-67384
Microsoft SQL Server is affected by an integer overflow or wraparound vulnerability that allows an authorized attacker to execute code over a network, leading to a remote code execution scenario. The CVSS 3.1 score is 8.8 (HIGH) with a network attack vector, low complexity, and low privileges req...
EUVD-2026-73303
Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-73302
Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67383
Microsoft SQL Server is affected by an information disclosure vulnerability caused by the generation of error messages that contain sensitive information. An authorized attacker (low privileges required) can exploit this over a network to disclose sensitive data, with high confidentiality impact ...
EUVD-2026-73301
Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-73300
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network...
CVE-2026-67376
CVE-2026-67376 is an integer overflow or wraparound flaw in Microsoft SQL Server that allows an unauthorized, remote attacker to trigger a denial of service over the network. The CVSS 3.1 score is 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating low attack complexity, n...
CVE-2026-67379
CVE-2026-67379 is a stack-based buffer overflow in Microsoft SQL Server that allows an authorized attacker (low privileges) to achieve remote code execution over the network. The CVSS 3.1 score is 8.5 (HIGH) with a scope change, reflecting high impact on confidentiality, integrity, and availabili...