CVE-2026-67648: Use of Uninitialized Resource

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67638: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67630: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67383: Generation of Error Message Containing Sensitive Information

Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67379: Stack-based Buffer Overflow

Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67376: Integer Overflow or Wraparound

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network...

CVE-2026-69562: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network...

CVE-2026-77488: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in SQL Server allows an authorized attacker to disclose information locally...

PT-2026-87260

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an authorized attacker to disclose sensitive information over a network. An out-of-bounds read occurs when the software reads data past the end or prior to the...

CVE-2026-77481: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

PT-2026-87220

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper privilege management allows an authorized attacker to elevate privileges over a network, which can enable them to affect the system. Recommendations At the moment, there is no...

PT-2026-87947

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-87230

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an authorized attacker to...

CVE-2026-67633: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-77486: Integer Overflow or Wraparound

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-77483: Weak Authentication

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-73029: Buffer Over-read

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67380: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

PT-2026-87215

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper neutralization of special elements in output used by a downstream component injection allows an unauthorized attacker to elevate privileges over a network. When using SQL Copilot ...

PT-2026-87258

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an authorized attacker to disclose sensitive information over a network, which can subsequently affect the system. An out-of-bounds read occurs when the softwa...