SQL Server Elevation of Privilege Vulnerability

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

SQL Server Elevation of Privilege Vulnerability

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-87220

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper privilege management allows an authorized attacker to elevate privileges over a network, which can enable them to affect the system. Recommendations At the moment, there is no...

CVE-2026-68779: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-68785: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67378: Untrusted Pointer Dereference

Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-67631: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...

PT-2026-87234

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A use after free issue exists that allows an authorized attacker to execute arbitrary code over a network, potentially affecting the system. Use after free is a memory corruption flaw that...

PT-2026-87948

Integer underflow wrap or wraparound in SQL Server allows an authorized attacker to disclose information locally...

PT-2026-87937

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A buffer over-read allows an authorized attacker to disclose sensitive information over a network. A buffer over-read occurs when a program reads more data from a buffer than it is intende...

PT-2026-87568

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information about a newer version that...

PT-2026-87219

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Insufficient logging allows an authorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the moment, there is no...

PT-2026-87228

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An untrusted pointer dereference allows an unauthorized remote attacker to execute arbitrary code over a network, which can affect the system. A pointer dereference occurs when a program...

PT-2026-87218

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Insufficient granularity of access control allows an authorized attacker to elevate privileges over a network, which can lead to unauthorized system impact. Recommendations At the moment,...

PT-2026-87224

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an authorized attacker to disclose sensitive information over a network. An out-of-bounds read occurs when the software reads data past the end or prior to the...

PT-2026-87221

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network. SQL injection is a technique...

PT-2026-87225

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network. This issue enables an...

PT-2026-87223

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-87226

Name of the Vulnerable Software and Affected Versions SQL Server version 2025 Description A heap-based buffer overflow exists in SQL Server, which allows an authorized attacker to execute arbitrary code over a network by using a crafted query. A heap-based buffer overflow occurs when a program...

PT-2026-87230

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an authorized attacker to...