CVE-2026-77485: Use After Free

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-77482: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-77480: Insufficient Granularity of Access Control

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-87256

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an authorized attacker to disclose sensitive information over a network. An out-of-bounds read occurs when the software reads data past the end or prior to the...

PT-2026-87262

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an authorized attacker to...

PT-2026-87218

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Insufficient granularity of access control allows an authorized attacker to elevate privileges over a network, which can lead to unauthorized system impact. Recommendations At the moment,...

PT-2026-87942

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized remote attacke...

PT-2026-87946

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network...

PT-2026-87943

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Weak authentication allows an authorized attacker to elevate privileges over a network, which can lead to unauthorized system impact. Recommendations At the moment, there is no information...

PT-2026-87248

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network...

PT-2026-87239

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...

PT-2026-87246

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

PT-2026-87241

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an authorized attacker to disclose sensitive information over a network, which can subsequently affect the system. Recommendations At the moment, there is no...

CVE-2026-67368: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-68777: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

PT-2026-88000

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

PT-2026-87250

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized remote attacke...

PT-2026-87263

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an authorized attacker to...

PT-2026-87244

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read occurs when the software reads data past the end of the intended buffer, which can lead to system instability. This issue allows an authorized attacker to cause a...

PT-2026-87226

Name of the Vulnerable Software and Affected Versions SQL Server version 2025 Description A heap-based buffer overflow exists in SQL Server, which allows an authorized attacker to execute arbitrary code over a network by using a crafted query. A heap-based buffer overflow occurs when a program...