CVE-2026-47297: Deserialization of Untrusted Data

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-68780: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-68778: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-68777: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67648: Use of Uninitialized Resource

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67638: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-68775: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-68776: Use of Uninitialized Resource

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67641: Integer Overflow or Wraparound

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-67642: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67393: Buffer Over-read

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67390: Buffer Over-read

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67380: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67388: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67385: Use After Free

Use after free in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67381: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-67386: Use of Uninitialized Resource

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-66820: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-66818: Improper Privilege Management

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-66814: Insufficient Granularity of Access Control

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...