CVE-2026-69562: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network...

CVE-2026-67633: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-68778: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67380: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-73029: Buffer Over-read

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67630: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67648: Use of Uninitialized Resource

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-65669: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-68779: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-66820: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-67383: Generation of Error Message Containing Sensitive Information

Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-77488: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in SQL Server allows an authorized attacker to disclose information locally...

CVE-2026-77483: Weak Authentication

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-87237

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

PT-2026-87221

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-87231

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-87220

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-87948

Integer underflow wrap or wraparound in SQL Server allows an authorized attacker to disclose information locally...

PT-2026-87947

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-87225

🛡️ SQL Server’s “authorized user” can potentially turn a network connection into sysadmin access. CVE-2026-67370 is a reminder that database permissions are not a security strategy—patch now. https://t.co/kqYIHEbddp MicrosoftSecurity Msrc Cve202667370 https://t.co/yPfN0qbIFU...