Azure Arc SQL Server Extension Elevation of Privilege Vulnerability

Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

PT-2026-87946

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network...

PT-2026-87220

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper privilege management allows an authorized attacker to elevate privileges over a network, which can enable them to affect the system. Recommendations At the moment, there is no...

CVE-2026-77480: Insufficient Granularity of Access Control

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-68779: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-68785: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67378: Untrusted Pointer Dereference

Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-67631: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...

PT-2026-87234

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A use after free issue exists that allows an authorized attacker to execute arbitrary code over a network, potentially affecting the system. Use after free is a memory corruption flaw that...

PT-2026-87947

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-87940

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Insufficient granularity of access control allows an authorized attacker to elevate privileges over a network, which can lead to unauthorized system impact. Recommendations At the moment,...

PT-2026-87948

Integer underflow wrap or wraparound in SQL Server allows an authorized attacker to disclose information locally...

PT-2026-87945

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A use after free issue allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer...

PT-2026-87937

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A buffer over-read allows an authorized attacker to disclose sensitive information over a network. A buffer over-read occurs when a program reads more data from a buffer than it is intende...

PT-2026-87941

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

PT-2026-88000

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

PT-2026-87936

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges over a network, which enables them to affect the system. Recommendations At the moment, there is no information...

PT-2026-87943

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Weak authentication allows an authorized attacker to elevate privileges over a network, which can lead to unauthorized system impact. Recommendations At the moment, there is no information...

PT-2026-87568

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information about a newer version that...