5409 matches found
CVE-2026-67390: Buffer Over-read
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67388: Heap-based Buffer Overflow
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-67385: Use After Free
Use after free in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-67381: Heap-based Buffer Overflow
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-67378: Untrusted Pointer Dereference
Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network...
CVE-2026-67373: Heap-based Buffer Overflow
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-66819: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
PT-2026-87244
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read occurs when the software reads data past the end of the intended buffer, which can lead to system instability. This issue allows an authorized attacker to cause a...
PT-2026-87241
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an authorized attacker to disclose sensitive information over a network, which can subsequently affect the system. Recommendations At the moment, there is no...
CVE-2026-67368: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...
PT-2026-87568
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information about a newer version that...
CVE-2026-77487: Improper Access Control
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-77480: Insufficient Granularity of Access Control
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-77485: Use After Free
Use after free in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-77482: Heap-based Buffer Overflow
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...
CVE-2026-68777: Out-of-bounds Read
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
PT-2026-87232
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An authorized attacker can disclose sensitive information over a network due to the generation of error messages that contain sensitive data. Recommendations At the moment, there is no...
PT-2026-87263
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an authorized attacker to...
PT-2026-87226
Name of the Vulnerable Software and Affected Versions SQL Server version 2025 Description A heap-based buffer overflow exists in SQL Server, which allows an authorized attacker to execute arbitrary code over a network by using a crafted query. A heap-based buffer overflow occurs when a program...