CVE-2025-47997

CVE-2025-47997 is an information-disclosure vulnerability in Microsoft SQL Server caused by a race-condition during concurrent access to a shared resource. The issue could allow an authorized user to disclose data over a network. Public details in connected sources indicate Microsoft has issued s...

CVE-2026-68779

CVE-2026-68779 is an out-of-bounds read in Microsoft SQL Server that allows an authorized (low-privilege) attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , indicating a high confidentiality impact with no int...

CVE-2026-67386

Microsoft SQL Server is affected by a use of uninitialized resource flaw that allows an authorized attacker (low privileges) to disclose information over a network. The vulnerability carries a CVSS 3.1 score of 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating high con...

CVE-2026-68778

CVE-2026-68778 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, reflecting high confidential...

CVE-2026-67645

CVE-2026-67645 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker to disclose information over a network . The CVSS 3.1 base score is 6.5 (MEDIUM) , reflecting low complexity, low privileges required, and high confidentiality impact with no integrity or availabili...

CVE-2026-67648

Microsoft SQL Server is affected by a use of uninitialized resource vulnerability that allows an authorized attacker (low privileges) to disclose information over a network . The CVSS 3.1 base score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating high confidential...

CVE-2026-68777

CVE-2026-68777 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The CVSS 3.1 base score is 6.5 (Medium) with high confidentiality impact but no integrity or availability impact. CISA's SSVC assessment rates e...

CVE-2026-67633

Microsoft SQL Server is affected by an out-of-bounds read vulnerability that allows an authorized attacker (low privileges) to trigger a denial of service over the network. The CNA-assigned CVSS 3.1 score is 6.5 (MEDIUM) , reflecting network attack vector, low complexity, and high availability im...

CVE-2026-67393

CVE-2026-67393 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The vulnerability is classified as information disclosure with a CVSS 3.1 base score of 6.5 (Medium) , requiring low privileges and no user interac...

CVE-2026-68780

CVE-2026-68780 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network. The CVSS 3.1 score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , reflecting high confidentiality impact with no ...

CVE-2026-68784

CVE-2026-68784 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network . The CVSS v3.1 score is 6.5 (Medium) with the vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating a high confidentiality impact with low priv...

CVE-2026-78441

CVE-2026-78441 is an out-of-bounds read vulnerability in Windows OLE DB that allows an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N — indicating network reachability, low complexity, no priv...

CVE-2026-67630

CVE-2026-67630 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (MEDIUM) , with low attack complexity, low privileges required, no user interaction, and high impact on confidentiali...

CVE-2026-68776

CVE-2026-68776 is an information disclosure vulnerability in Microsoft SQL Server caused by a use of uninitialized resource . An authorized attacker can exploit this over a network to disclose sensitive information. The CNA-assigned CVSS 3.1 score is 6.5 (Medium) with the vector AV:N/AC:L/PR:L/UI...

CVE-2026-69562

CVE-2026-69562 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an unauthorized, remote attacker to disclose information over a network. The attack vector is network-based with low complexity, requires no prior privileges, but does require user interaction . The impact i...

CVE-2026-67629

CVE-2026-67629 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges) to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, reflecting high confidentiality impac...

CVE-2026-67390

CVE-2026-67390 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network with low attack complexity and no user interaction. The CVSS 3.1 score is 6.5 (Medium) , reflecting high confidentiality i...

CVE-2026-68781

CVE-2026-68781 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The flaw requires low privileges and no user interaction , with low attack complexity . The CVSS 3.1 base score is 6.5 (MEDIUM) , reflecting a h...