5076 matches found
EUVD-2026-73785
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-77483
CVE-2026-77483 affects Microsoft SQL Server and involves a weak authentication mechanism that allows an authorized attacker (low privileges required) to elevate privileges over a network . The CVSS 3.1 score is 8.8 (HIGH) with vectors for network attack, low complexity, no user interaction, and h...
EUVD-2026-73784
Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-77480
SQL Server is affected by an elevation of privilege vulnerability caused by insufficient granularity of access control . An authorized attacker with low privileges can exploit the flaw over a network to elevate their access, resulting in high impact to confidentiality, integrity, and availability...
EUVD-2026-73783
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-73028
Microsoft SQL Server is affected by an improper access control vulnerability (CVE-2026-73028) that allows an authorized attacker to elevate privileges over a network . The vulnerability is rated HIGH severity with a CVSS 3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating low ...
EUVD-2026-73782
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-47297
Microsoft SQL Server is affected by a deserialization of untrusted data vulnerability that allows an unauthorized attacker to achieve remote code execution over a network . The vulnerability requires no prior authentication or user interaction but carries a High attack complexity , resulting in a...
EUVD-2026-73644
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...
CVE-2026-68780
CVE-2026-68780 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network. The CVSS 3.1 score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , reflecting high confidentiality impact with no ...
EUVD-2026-73396
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73395
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73394
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-68778
CVE-2026-68778 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, reflecting high confidential...
CVE-2026-68779
CVE-2026-68779 is an out-of-bounds read in Microsoft SQL Server that allows an authorized (low-privilege) attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , indicating a high confidentiality impact with no int...
CVE-2026-68776
CVE-2026-68776 is an information disclosure vulnerability in Microsoft SQL Server caused by a use of uninitialized resource . An authorized attacker can exploit this over a network to disclose sensitive information. The CNA-assigned CVSS 3.1 score is 6.5 (Medium) with the vector AV:N/AC:L/PR:L/UI...
EUVD-2026-73393
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-68777
CVE-2026-68777 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The CVSS 3.1 base score is 6.5 (Medium) with high confidentiality impact but no integrity or availability impact. CISA's SSVC assessment rates e...