EUVD-2026-100619

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-94512

A heap-based buffer overflow vulnerability in Microsoft SQL Server allows an authorized attacker to achieve remote code execution over a network. This vulnerability could lead to a denial-of-service attack, the acquisition of excessive privileges, or unauthorized access to sensitive data. Remedia...

CVE-2026-94520

A use of an externally-controlled format string in Microsoft SQL Server allows an authorized attacker to perform a denial-of-service (DoS) attack over a network. Microsoft has released security updates to address this vulnerability, including updates for SQL Server 2019 (CU32, GDR) , SQL Server 2...

CVE-2026-88084

A Denial of Service (DoS) vulnerability exists in Microsoft SQL Server due to the allocation of resources without limits or throttling . An authorized attacker can exploit this flaw over a network to disrupt service availability. Microsoft has released updates to address this issue, including KB5...

CVE-2026-85919

A Heap-based buffer overflow in Microsoft SQL Server allows an authorized attacker to elevate privileges locally . This vulnerability may allow malicious actors to gain excessive privileges, execute arbitrary code, or access sensitive data. Remediation is available through official Microsoft secu...

CVE-2026-88088

An integer overflow or wraparound vulnerability in Microsoft SQL Server allows an authorized attacker to achieve local privilege escalation . Microsoft has released updates to address this vulnerability, which may be mitigated by installing the security updates provided in KB5126967 (SQL Server 2...

CVE-2026-88085

A heap-based buffer overflow exists in Microsoft SQL Server , which allows an authorized attacker to achieve local privilege elevation . While the specific vulnerable components are not detailed individually, Microsoft has released security updates to address this and other vulnerabilities, inclu...

CVE-2026-88086

An out-of-bounds read vulnerability exists in Microsoft SQL Server , which may allow an unauthorized attacker to disclose information over an adjacent network. While specific versions are not detailed in the description, related security updates are identified in KB5126967 , KB5128495 , KB5128492...

CVE-2026-88089

A heap-based buffer overflow exists in Microsoft SQL Server , which could allow an authorized attacker to execute code locally . This vulnerability is associated with several security updates, including KB5126967 (SQL Server 2025 CU9), KB5128495 (SQL Server 2019 GDR), KB5128496 (SQL Server 2017 C...

CVE-2026-88081

A vulnerability in Microsoft SQL Server involving an out-of-bounds read allows an authorized attacker to disclose information over a network. Microsoft has released security updates to address this issue, which can be found through relevant Knowledge Base articles including KB5126967 , KB5128495 ...

CVE-2026-88082

A heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally . The vulnerability could potentially allow malicious actors to gain excessive privileges, execute arbitrary code, and access sensitive data. Microsoft has released updates to address these issu...

CVE-2026-88083

A stack-based buffer overflow vulnerability exists in Microsoft SQL Server that could allow an unauthorized attacker to execute arbitrary code over a network. Exploitation of this flaw could lead to a denial-of-service attack, the acquisition of excessive privileges, or unauthorized access to sen...

CVE-2026-85888

A high-severity out-of-bounds read vulnerability exists in Microsoft SQL Server , which may allow an authorized attacker to disclose information over a network. The vulnerability is associated with multiple versions, including SQL Server 2017, 2019, 2022, and 2025 . Microsoft has released securit...

CVE-2026-65674

A deserialization of untrusted data vulnerability exists in Microsoft SQL Server , which allows an authorized attacker to execute arbitrary code over a network. While specific affected versions are not detailed in the description, Microsoft has released security updates to address this issue. Use...

CVE-2026-67626

A vulnerability in Microsoft SQL Server allows an authorized attacker to cause a denial-of-service (DoS) over a network due to uncontrolled resource consumption . While specific technical root causes or affected versions are not detailed in the provided documents, Microsoft has released updates t...

CVE-2026-67628

An out-of-bounds read vulnerability exists in SQL Server , which allows an authorized attacker to disclose information over a network. The vulnerability is categorized as an information disclosure issue. Microsoft has released security updates to address this, including KB5128495 for SQL Server 2...

CVE-2026-85876

A Use after free vulnerability in Microsoft SQL Server allows an authorized attacker to elevate privileges locally . Microsoft has released security updates to address this issue, which can be found in various Knowledge Base articles including KB5128495 (SQL Server 2019 GDR), KB5126967 (SQL Serve...

CVE-2026-83945

A heap-based buffer overflow vulnerability in Microsoft SQL Server allows an authorized attacker to execute arbitrary code over a network. This vulnerability could lead to a denial-of-service attack, privilege escalation, or unauthorized access to sensitive data. Microsoft has released updates to...

CVE-2026-85886

A heap-based buffer overflow in SQL Server allows an authorized attacker to achieve remote code execution over a network. This vulnerability could lead to a denial-of-service attack, excessive privilege gain, and unauthorized access to sensitive data. Microsoft has released security updates to ad...

CVE-2026-68883

A heap-based buffer overflow in Microsoft SQL Server allows an authorized attacker to elevate privileges over a network. This vulnerability could allow malicious actors to cause a denial-of-service attack, gain excessive privileges, execute arbitrary code, and potentially access sensitive data. M...