CVE-2026-67636: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-67624: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67389: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-68775: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67645: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67642: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67639: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67393: Buffer Over-read

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67386: Use of Uninitialized Resource

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67369: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-77484: Deserialization of Untrusted Data

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-73028: Improper Access Control

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-67370: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-87249

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

PT-2026-87219

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Insufficient logging allows an authorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the moment, there is no...

CVE-2026-66814: Insufficient Granularity of Access Control

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-68780: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-68785: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-47297: Deserialization of Untrusted Data

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-77184: Improper Neutralization of Special Elements used in an SQL Command

In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comment text of the DDL returned by SHOW CREATE statements without complete escaping of backslash characters. A user with permission to modify a collection's schema validator, in...