5409 matches found
EUVD-2026-44224
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-47295 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-47295
CVE-2026-47295 describes an elevation-of-privilege vulnerability in Microsoft SQL Server caused by improper neutralization of special elements used in SQL commands (SQL injection). The issue can be exploited by an authenticated attacker over a network to gain elevated privileges, with impact on c...
CVE-2026-55002
Technical details about CVE-2026-55002 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-55002 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-54118 Microsoft SQL Server Remote Code Execution Vulnerability
...
CVE-2026-54118
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-54117
Microsoft SQL Server is vulnerable to a deserialization-of-untrusted-data flaw (CWE-502) allowing an unauthorized network attacker to execute arbitrary code with no authentication required (CVSS 9.8 critical). Affected products include SQL Server 2016 through 2025, Fabric Data Warehouse, and Powe...
CVE-2026-54117 Microsoft SQL Server Remote Code Execution Vulnerability
...
CVE-2026-54117
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-42990
CVE-2026-42990 affects the SQL Server ODBC driver, where a heap-based buffer overflow enables code execution over the network. The vulnerability is exploitable remotely (network vector) and is rated high severity (CVSS 3.1: 9.8, CRITICAL) with no privileges required and no user interaction. The a...
CVE-2026-42990 SQL Server ODBC driver Elevation of Privilege Vulnerability
...
CVE-2026-47296 Microsoft SQL Server Elevation of Privilege Vulnerability
...
SQL Server ODBC driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network...
Microsoft SQL Server Remote Code Execution Vulnerability
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...
Microsoft SQL Server Elevation of Privilege Vulnerability
External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network...
PT-2026-58225
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...
PT-2026-58125
Name of the Vulnerable Software and Affected Versions SQL Server ODBC driver affected versions not specified Description A heap-based buffer overflow in the SQL Server ODBC driver allows an unauthorized remote attacker to execute arbitrary code over a network and achieve elevation of privilege. A...
CVE-2026-54117: Deserialization of Untrusted Data
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...
CVE-2026-54116: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in SQL Server allows an authorized attacker to disclose information over a network...