5409 matches found
EUVD-2026-73184
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67630
CVE-2026-67630 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (MEDIUM) , with low attack complexity, low privileges required, no user interaction, and high impact on confidentiali...
CVE-2026-67631
CVE-2026-67631 is a heap-based buffer overflow in Microsoft SQL Server that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 3.1 9.8 (Critical) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating no privileges or user in...
EUVD-2026-73185
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-67629
CVE-2026-67629 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges) to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, reflecting high confidentiality impac...
EUVD-2026-73183
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67370
CVE-2026-67370 is an SQL injection vulnerability in Microsoft SQL Server where improper neutralization of special elements used in a SQL command allows an authorized attacker to elevate privileges over a network. The vulnerability carries a CVSS v3.1 score of 8.8 (HIGH) with a vector of AV:N/AC:L...
EUVD-2026-73182
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-67373
This CVE describes a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 8.8 (HIGH) (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating low attack complexity and low privilege requirem...
EUVD-2026-73181
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73180
Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-67368
Microsoft SQL Server is affected by an improper link resolution before file access ('link following') flaw that allows an authorized attacker to elevate privileges over a network. The root cause is a link following issue in how SQL Server resolves file links prior to access. Per the assigned CVSS...
CVE-2026-77482
CVE-2026-77482 is a heap-based buffer overflow in Microsoft SQL Server that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (High) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating low attack complexity but required user interac...
EUVD-2026-73175
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to elevate privileges over a network...
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
Microsoft SQL Server Elevation of Privilege Vulnerability
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...