913 matches found
CVE-2026-70210
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-70210
A heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to achieve elevation of privilege over a network. The vulnerability (CWE-122, CWE-125) has a CVSS 3.1 base score of 8.8 . Exploitation details are not provided in the documents. Remediation via an official fix is indic...
Windows OLE DB Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network...
PT-2026-112304
Name of the Vulnerable Software and Affected Versions Windows OLE DB affected versions not specified Description A heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network. A heap-based buffer overflow occurs when a program writes more data...
CVE-2026-70210: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network...
Microsoft Windows: CVE-2026-70210: Windows OLE DB Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network...
Microsoft SQL Server OLE DB Code Execution
The vulnerability of the OLE DB driver of the Microsoft SQL Server database management system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Microsoft SQL Server (September 2026)
The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. CVE-2026-77482 - Integer overflow or wraparound ...
Microsoft SQL Server (September 2026)
The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. CVE-2026-77482 - Integer overflow or wraparound ...
Vulnerabilities in SQL Server
Microsoft has identified 62 vulnerabilities in various components of SQL Server. Malicious actors could exploit these vulnerabilities to execute attacks that can cause damage, as listed in the table below. CVE-2026-67643 | 8.80 | Execution of arbitrary code | CVE-2026-67645 | 6.50 | Access to...
CVE-2026-78442
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...
CVE-2026-78441
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network...
CVE-2026-72933
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network...
EUVD-2026-73795
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...
CVE-2026-78442
CVE-2026-78442 is a heap-based buffer overflow in Windows OLE DB that allows an unauthorized attacker to achieve remote code execution over a network with user interaction. The CNA-assigned CVSS 3.1 score is 8.8 (High) with full impact on confidentiality, integrity, and availability. CISA's SSVC ...
EUVD-2026-73796
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network...
CVE-2026-78441
CVE-2026-78441 is an out-of-bounds read vulnerability in Windows OLE DB that allows an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N — indicating network reachability, low complexity, no priv...
CVE-2026-72933
CVE-2026-72933 is a heap-based buffer overflow in the Microsoft WDAC (Windows Defender Application Control) OLE DB provider for SQL , allowing an unauthorized remote attacker to achieve code execution over a network . The vulnerability is rated CVSS 3.1 8.8 (HIGH) by Microsoft (CNA), with the vec...