CVE-2026-88083

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-88084

Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-85919

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-85886

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-85888

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-85876

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-83945

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-70189

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

CVE-2026-68883

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-65674

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67625

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67626

Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-67628

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

EUVD-2026-100620

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-94520

A use of an externally-controlled format string in Microsoft SQL Server allows an authorized attacker to perform a denial-of-service (DoS) attack over a network. Microsoft has released security updates to address this vulnerability, including updates for SQL Server 2019 (CU32, GDR) , SQL Server 2...

EUVD-2026-100619

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-94512

A heap-based buffer overflow vulnerability in Microsoft SQL Server allows an authorized attacker to achieve remote code execution over a network. This vulnerability could lead to a denial-of-service attack, the acquisition of excessive privileges, or unauthorized access to sensitive data. Remedia...

EUVD-2026-100614

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network...

CVE-2026-88088

An integer overflow or wraparound vulnerability in Microsoft SQL Server allows an authorized attacker to achieve local privilege escalation . Microsoft has released updates to address this vulnerability, which may be mitigated by installing the security updates provided in KB5126967 (SQL Server 2...

CVE-2026-88084

A Denial of Service (DoS) vulnerability exists in Microsoft SQL Server due to the allocation of resources without limits or throttling . An authorized attacker can exploit this flaw over a network to disrupt service availability. Microsoft has released updates to address this issue, including KB5...