CVE-2026-68775

Microsoft SQL Server is affected by a heap-based buffer overflow vulnerability that allows an authorized attacker (with low privileges) to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high impa...

CVE-2026-67648

Microsoft SQL Server is affected by a use of uninitialized resource vulnerability that allows an authorized attacker (low privileges) to disclose information over a network . The CVSS 3.1 base score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating high confidential...

EUVD-2026-73391

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73390

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67641

Microsoft SQL Server is affected by an integer overflow or wraparound vulnerability that allows an authorized attacker (low privileges) to trigger a denial of service over a network with low complexity and no user interaction. The CVSS 3.1 score is 6.5 (Medium) , with the primary impact on availa...

CVE-2026-67642

Microsoft SQL Server is affected by a heap-based buffer overflow that allows an authorized attacker (low privileges required) to achieve remote code execution over the network. The vulnerability is rated CVSS 3.1 8.8 (High) with high impact to confidentiality, integrity, and availability. CISA's ...

EUVD-2026-73389

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73388

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-67639

CVE-2026-67639 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (HIGH) with full impact to confidentiality, integrity, and availability. No exploit availabili...

EUVD-2026-73387

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67393

CVE-2026-67393 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The vulnerability is classified as information disclosure with a CVSS 3.1 base score of 6.5 (Medium) , requiring low privileges and no user interac...

CVE-2026-67638

Microsoft SQL Server is affected by a heap-based buffer overflow that allows an authorized (low-privilege) attacker to execute code over the network, resulting in a Remote Code Execution vulnerability. The CVSS 3.1 score is 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, sourced by Mi...

EUVD-2026-73386

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73385

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67388

CVE-2026-67388 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker (low privileges) to achieve remote code execution over the network. The vulnerability is rated CVSS 3.1 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack ...

CVE-2026-67390

CVE-2026-67390 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network with low attack complexity and no user interaction. The CVSS 3.1 score is 6.5 (Medium) , reflecting high confidentiality i...

EUVD-2026-73384

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...

EUVD-2026-73383

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67386

Microsoft SQL Server is affected by a use of uninitialized resource flaw that allows an authorized attacker (low privileges) to disclose information over a network. The vulnerability carries a CVSS 3.1 score of 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating high con...

CVE-2026-67385

Microsoft SQL Server is affected by a use-after-free vulnerability that allows an authorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. CISA's SSVC assessment indicates no known exploit...