CVE-2026-77481

CVE-2026-77481 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker (low privileges required) to achieve remote code execution over a network . The CVSS 3.1 base score is 8.8 (HIGH) , with high impact to confidentiality, integrity, and availability, and no us...

CVE-2026-67624

CVE-2026-67624 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker (low privileges) to disclose information over a network. The vulnerability is rated CVSS 6.5 (Medium) with no integrity or availability impact. CISA's SSVC assessment indicates no known exploitation...

EUVD-2026-73822

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-66819

CVE-2026-66819 is an SQL injection vulnerability in Microsoft SQL Server , caused by improper neutralization of special elements used in SQL commands. An authorized attacker can exploit it over a network to elevate privileges , with a CVSS 3.1 score of 8.8 (HIGH) and impacts rated High for confid...

CVE-2026-67369

CVE-2026-67369 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The vulnerability requires low privileges and has a CVSS 3.1 score of 6.5 (MEDIUM) with high confidentiality impact but no integrity or availability impact. C...

EUVD-2026-73814

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73815

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

EUVD-2026-73809

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-78456

CVE-2026-78456 affects Microsoft SQL Server and is caused by a heap-based buffer overflow that allows an authorized attacker (low privileges required) to achieve remote code execution over the network. The CVSS v3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflect...

CVE-2026-69562

CVE-2026-69562 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an unauthorized, remote attacker to disclose information over a network. The attack vector is network-based with low complexity, requires no prior privileges, but does require user interaction . The impact i...

EUVD-2026-73794

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73789

Integer underflow wrap or wraparound in SQL Server allows an authorized attacker to disclose information locally...

CVE-2026-77488

Microsoft SQL Server is affected by an integer underflow (wrap or wraparound) that allows an authorized local attacker to disclose information. The flaw requires low privileges and no user interaction, with a CVSS 3.1 score of 5.5 (MEDIUM) — high confidentiality impact but no integrity or availab...

CVE-2026-77486

CVE-2026-77486 is a remote code execution vulnerability in Microsoft SQL Server caused by an integer overflow or wraparound , allowing an unauthorized attacker to execute code over a network. The vulnerability requires user interaction (UI:R) but demands no prior privileges (PR:N) and has low att...

EUVD-2026-73788

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network...

EUVD-2026-73787

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-77485

CVE-2026-77485 is a use-after-free vulnerability in Microsoft SQL Server that allows an authorized attacker to elevate privileges locally . The flaw requires local access and low privileges, with high attack complexity and no user interaction, scoring CVSS 3.1 7.0 (HIGH) with full impact on confi...

EUVD-2026-73786

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-77487

CVE-2026-77487 is an improper access control vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to elevate privileges over a network with low complexity and no user interaction. The CVSS 3.1 base score is 8.8 (HIGH) , with high impact to confidentia...

CVE-2026-77484

CVE-2026-77484 is a remote code execution vulnerability in Microsoft SQL Server caused by deserialization of untrusted data , allowing an authorized attacker to execute code over a network. The CVSS v3.1 score is 8.8 (High) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating network-explo...