CVE-2026-67384

Microsoft SQL Server is affected by an integer overflow or wraparound vulnerability that allows an authorized attacker to execute code over a network, leading to a remote code execution scenario. The CVSS 3.1 score is 8.8 (HIGH) with a network attack vector, low complexity, and low privileges req...

EUVD-2026-73303

Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73302

Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67383

Microsoft SQL Server is affected by an information disclosure vulnerability caused by the generation of error messages that contain sensitive information. An authorized attacker (low privileges required) can exploit this over a network to disclose sensitive data, with high confidentiality impact ...

EUVD-2026-73301

Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73300

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network...

CVE-2026-67379

CVE-2026-67379 is a stack-based buffer overflow in Microsoft SQL Server that allows an authorized attacker (low privileges) to achieve remote code execution over the network. The CVSS 3.1 score is 8.5 (HIGH) with a scope change, reflecting high impact on confidentiality, integrity, and availabili...

CVE-2026-67376

CVE-2026-67376 is an integer overflow or wraparound flaw in Microsoft SQL Server that allows an unauthorized, remote attacker to trigger a denial of service over the network. The CVSS 3.1 score is 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating low attack complexity, n...

CVE-2026-67378

CVE-2026-67378 is an untrusted pointer dereference in Microsoft SQL Server that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 9.0 (Critical) with a high attack complexity, no required privileges, and a changed scope (impact: high across con...

EUVD-2026-73298

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73190

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

CVE-2026-68787

A heap-based buffer overflow in Microsoft SQL Server allows an authorized attacker with low privileges to execute code locally. The flaw requires no user interaction and results in high impact to confidentiality, integrity, and availability (CVSS 3.1 base score 7.8 – HIGH , vector AV:L/AC:L/PR:L/...

CVE-2026-68785

Microsoft SQL Server is affected by a heap-based buffer overflow that allows an authorized attacker (high privileges required) to execute code over a network. The CVSS v3.1 score is 4.9 (Medium) , reflecting a network attack vector with low complexity, high privileges required, and no user intera...

EUVD-2026-73189

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-68784

CVE-2026-68784 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network . The CVSS v3.1 score is 6.5 (Medium) with the vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating a high confidentiality impact with low priv...

EUVD-2026-73188

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

EUVD-2026-73186

Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network...

EUVD-2026-73187

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-68781

CVE-2026-68781 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The flaw requires low privileges and no user interaction , with low attack complexity . The CVSS 3.1 base score is 6.5 (MEDIUM) , reflecting a h...

CVE-2026-67633

Microsoft SQL Server is affected by an out-of-bounds read vulnerability that allows an authorized attacker (low privileges) to trigger a denial of service over the network. The CNA-assigned CVSS 3.1 score is 6.5 (MEDIUM) , reflecting network attack vector, low complexity, and high availability im...