CVE-2026-73028: Improper Access Control

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-68786: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-68785: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-68780: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-68775: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67645: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67642: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67641: Integer Overflow or Wraparound

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-67639: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67636: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-67624: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67393: Buffer Over-read

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67389: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67386: Use of Uninitialized Resource

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-66814: Insufficient Granularity of Access Control

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-47297: Deserialization of Untrusted Data

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...

PT-2026-87249

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

PT-2026-87219

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Insufficient logging allows an authorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the moment, there is no...

CVE-2026-67370: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-77184: Improper Neutralization of Special Elements used in an SQL Command

In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comment text of the DDL returned by SHOW CREATE statements without complete escaping of backslash characters. A user with permission to modify a collection's schema validator, in...