157810 matches found
EUVD-2026-100620
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...
CVE-2026-94520
A use of an externally-controlled format string in Microsoft SQL Server allows an authorized attacker to perform a denial-of-service (DoS) attack over a network. Microsoft has released security updates to address this vulnerability, including updates for SQL Server 2019 (CU32, GDR) , SQL Server 2...
EUVD-2026-100619
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-100613
Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network...
CVE-2026-88084
A Denial of Service (DoS) vulnerability exists in Microsoft SQL Server due to the allocation of resources without limits or throttling . An authorized attacker can exploit this flaw over a network to disrupt service availability. Microsoft has released updates to address this issue, including KB5...
CVE-2026-85888
A high-severity out-of-bounds read vulnerability exists in Microsoft SQL Server , which may allow an authorized attacker to disclose information over a network. The vulnerability is associated with multiple versions, including SQL Server 2017, 2019, 2022, and 2025 . Microsoft has released securit...
EUVD-2026-100612
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-88081
A vulnerability in Microsoft SQL Server involving an out-of-bounds read allows an authorized attacker to disclose information over a network. Microsoft has released security updates to address this issue, which can be found through relevant Knowledge Base articles including KB5126967 , KB5128495 ...
EUVD-2026-100610
Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...
CVE-2026-67626
A vulnerability in Microsoft SQL Server allows an authorized attacker to cause a denial-of-service (DoS) over a network due to uncontrolled resource consumption . While specific technical root causes or affected versions are not detailed in the provided documents, Microsoft has released updates t...
EUVD-2026-100607
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
EUVD-2026-100606
Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network...
EUVD-2026-100605
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-85886
A heap-based buffer overflow in SQL Server allows an authorized attacker to achieve remote code execution over a network. This vulnerability could lead to a denial-of-service attack, excessive privilege gain, and unauthorized access to sensitive data. Microsoft has released security updates to ad...
CVE-2026-83945
A heap-based buffer overflow vulnerability in Microsoft SQL Server allows an authorized attacker to execute arbitrary code over a network. This vulnerability could lead to a denial-of-service attack, privilege escalation, or unauthorized access to sensitive data. Microsoft has released updates to...
EUVD-2026-100709
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-68883
A heap-based buffer overflow in Microsoft SQL Server allows an authorized attacker to elevate privileges over a network. This vulnerability could allow malicious actors to cause a denial-of-service attack, gain excessive privileges, execute arbitrary code, and potentially access sensitive data. M...
EUVD-2026-100711
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-96956
A stack-based buffer overflow in Microsoft SQL Server allows an authorized attacker to elevate privileges over a network. While the provided documents do not specify the exact component or file involved, the vulnerability could lead to arbitrary code execution, denial-of-service, or unauthorized ...