Microsoft SQL Server Elevation of Privilege Vulnerability

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

KB5128497 - Description of the security update for SQL Server 2017 GDR: October 13, 2026

KB5128497 - Description of the security update for SQL Server 2017 GDR: October 13, 2026 Applies To SQL Server 2017 on Windows SQL Server 2017 on Linux Release date: October 13, 2026 Version: 14.0.2140.2 Summary Known issues in this update Improvements and fixes included in this update How to...

KB5128496 - Description of the security update for SQL Server 2017 CU31: October 13, 2026

KB5128496 - Description of the security update for SQL Server 2017 CU31: October 13, 2026 Applies To SQL Server 2017 on Linux SQL Server 2017 on Windows Release date: October 13, 2026 Version: 14.0.3560.2 Summary Known issues in this update Improvements and fixes included in this update How to...

KB5128494 - Description of the security update for SQL Server 2019 CU32: October 13, 2026

KB5128494 - Description of the security update for SQL Server 2019 CU32: October 13, 2026 Applies To SQL Server 2019 on Windows SQL Server 2019 on Linux Release date: October 13, 2026 Version: 15.0.4500.2 Summary Known issues in this update Improvements and fixes included in this update How to...

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...

Microsoft SQL Server Denial of Service Vulnerability

Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network...

Microsoft SQL Server Denial of Service Vulnerability

Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network...

Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

Microsoft SQL Server Elevation of Privilege Vulnerability

Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally...

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

KB5128492 - Description of the security update for SQL Server 2025 GDR: October 13, 2026

KB5128492 - Description of the security update for SQL Server 2025 GDR: October 13, 2026 Applies To SQL Server 2025 on Windows all editions, SQL Server 2025 on Linux all editions Release date: October 13, 2026 Version: 17.0.1145.4 Summary Known issues in this update Improvements and fixes include...

KB5128495 - Description of the security update for SQL Server 2019 GDR: October 13, 2026

KB5128495 - Description of the security update for SQL Server 2019 GDR: October 13, 2026 Applies To SQL Server 2019 on Windows SQL Server 2019 on Linux Release date: October 13, 2026 Version: 15.0.2200.2 Summary Known issues in this update Improvements and fixes included in this update How to...

Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

Microsoft SQL Server Remote Code Execution Vulnerability

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...

WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by dzaku in WordPress Plugin Link Whisper Free versions = 0.9.7...

SQL Injection

Overview @payloadcms/db-sqlite is a The officially supported SQLite database adapter for Payload Affected versions of this package are vulnerable to SQL Injection via improper escaping of string values in parseParams when constructing JSON queries for in and notin operators. An authenticated...

SQL Injection

Overview @payloadcms/db-d1-sqlite is a The officially supported D1 SQLite database adapter for Payload Affected versions of this package are vulnerable to SQL Injection via improper escaping of string values in parseParams when constructing JSON queries for in and notin operators. An authenticate...