5693 matches found
CVE-2026-77484: Deserialization of Untrusted Data
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-67629: Out-of-bounds Read
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-68784: Out-of-bounds Read
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67633: Out-of-bounds Read
Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network...
CVE-2026-67630: Out-of-bounds Read
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67369: Out-of-bounds Read
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
PT-2026-87263
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an authorized attacker to...
PT-2026-87945
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A use after free issue allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer...
CVE-2026-67642: Heap-based Buffer Overflow
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-67624: Out-of-bounds Read
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-73028: Improper Access Control
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
PT-2026-87252
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-66819: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
PT-2026-87253
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an authorized attacker to...
PT-2026-87221
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network. SQL injection is a technique...
PT-2026-87240
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an authorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information about a newer version that...
PT-2026-87250
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized remote attacke...
PT-2026-87243
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized remote attacke...