5291 matches found
CVE-2026-50468
CVE-2026-50468 affects Microsoft SQL Server. It is a buffer over-read that allows an authorized attacker to disclose information over the network. The published advisories indicate an impact of accessing sensitive data with a network attack vector and low privileges required; CVSS 3.1 base score ...
EUVD-2026-44224
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
EUVD-2026-44225
Access of resource using incompatible type 'type confusion' in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-54116 Microsoft SQL Server Information Disclosure Vulnerability
...
CVE-2026-50468 Microsoft SQL Server Information Disclosure Vulnerability
...
CVE-2026-47295 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-47295
CVE-2026-47295 describes an elevation-of-privilege vulnerability in Microsoft SQL Server caused by improper neutralization of special elements used in SQL commands (SQL injection). The issue can be exploited by an authenticated attacker over a network to gain elevated privileges, with impact on c...
CVE-2026-55002
Technical details about CVE-2026-55002 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-55002 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-54118 Microsoft SQL Server Remote Code Execution Vulnerability
...
CVE-2026-54118
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-54117
Microsoft SQL Server is vulnerable to a deserialization-of-untrusted-data flaw (CWE-502) allowing an unauthorized network attacker to execute arbitrary code with no authentication required (CVSS 9.8 critical). Affected products include SQL Server 2016 through 2025, Fabric Data Warehouse, and Powe...
CVE-2026-54117 Microsoft SQL Server Remote Code Execution Vulnerability
...
CVE-2026-54117
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-42990 SQL Server ODBC driver Elevation of Privilege Vulnerability
...
CVE-2026-42990
CVE-2026-42990 affects the SQL Server ODBC driver, where a heap-based buffer overflow enables code execution over the network. The vulnerability is exploitable remotely (network vector) and is rated high severity (CVSS 3.1: 9.8, CRITICAL) with no privileges required and no user interaction. The a...
CVE-2026-47296 Microsoft SQL Server Elevation of Privilege Vulnerability
...
Microsoft SQL Server Remote Code Execution Vulnerability
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...