6276 matches found
EUVD-2026-73388
Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network...
CVE-2026-67642
Microsoft SQL Server is affected by a heap-based buffer overflow that allows an authorized attacker (low privileges required) to achieve remote code execution over the network. The vulnerability is rated CVSS 3.1 8.8 (High) with high impact to confidentiality, integrity, and availability. CISA's ...
CVE-2026-67641
Microsoft SQL Server is affected by an integer overflow or wraparound vulnerability that allows an authorized attacker (low privileges) to trigger a denial of service over a network with low complexity and no user interaction. The CVSS 3.1 score is 6.5 (Medium) , with the primary impact on availa...
EUVD-2026-73387
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-67639
CVE-2026-67639 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (HIGH) with full impact to confidentiality, integrity, and availability. No exploit availabili...
CVE-2026-67393
CVE-2026-67393 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The vulnerability is classified as information disclosure with a CVSS 3.1 base score of 6.5 (Medium) , requiring low privileges and no user interac...
CVE-2026-67638
Microsoft SQL Server is affected by a heap-based buffer overflow that allows an authorized (low-privilege) attacker to execute code over the network, resulting in a Remote Code Execution vulnerability. The CVSS 3.1 score is 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, sourced by Mi...
EUVD-2026-73386
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-73385
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67390
CVE-2026-67390 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network with low attack complexity and no user interaction. The CVSS 3.1 score is 6.5 (Medium) , reflecting high confidentiality i...
EUVD-2026-73383
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-67386
Microsoft SQL Server is affected by a use of uninitialized resource flaw that allows an authorized attacker (low privileges) to disclose information over a network. The vulnerability carries a CVSS 3.1 score of 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating high con...
EUVD-2026-73381
Use after free in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-73382
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67385
Microsoft SQL Server is affected by a use-after-free vulnerability that allows an authorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. CISA's SSVC assessment indicates no known exploit...
EUVD-2026-73379
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-73380
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-67380
CVE-2026-67380 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires network access,...