PT-2026-87258

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an authorized attacker to disclose sensitive information over a network, which can subsequently affect the system. An out-of-bounds read occurs when the softwa...

PT-2026-87251

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

PT-2026-87261

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an authorized attacker to...

PT-2026-87233

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An integer overflow or wraparound occurs in SQL Server, which allows an authorized attacker to execute arbitrary code over a network and affect the system. An integer overflow is a conditi...

PT-2026-87229

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory. This...

PT-2026-87222

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network. SQL injection is a technique...

PT-2026-87245

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an unauthorized remote attacker to execute arbitrary code over a network, potentially affecting the system. An out-of-bounds read occurs when the software read...

PT-2026-87227

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An integer overflow or wraparound occurs, which allows an unauthorized attacker to cause a denial of service over a network. An integer overflow happens when an arithmetic operation attemp...

PT-2026-87937

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A buffer over-read allows an authorized attacker to disclose sensitive information over a network. A buffer over-read occurs when a program reads more data from a buffer than it is intende...

PT-2026-87940

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Insufficient granularity of access control allows an authorized attacker to elevate privileges over a network, which can lead to unauthorized system impact. Recommendations At the moment,...

PT-2026-87236

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an authorized attacker to...

PT-2026-87253

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an authorized attacker to...

PT-2026-87242

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an authorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information about a newer version that...

PT-2026-87240

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an authorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information about a newer version that...

PT-2026-87189

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Deserialization of untrusted data allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Recommendations At the moment, there is no...

PT-2026-87215

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper neutralization of special elements in output used by a downstream component injection allows an unauthorized attacker to elevate privileges over a network. When using SQL Copilot ...

CVE-2026-68786: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67636: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-67624: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67389: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...