Search Results (352 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-67628 1 Microsoft 12 Microsoft Sql Server 2017 (gdr), Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 (gdr) and 9 more 2026-10-24 4.9 Medium
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-94512 1 Microsoft 12 Microsoft Sql Server 2017 (gdr), Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 (gdr) and 9 more 2026-10-24 8.8 High
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-88085 1 Microsoft 9 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 6 more 2026-10-24 6.4 Medium
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-83945 1 Microsoft 5 Microsoft Sql Server 2022 For X64-based Systems \(cu27\), Microsoft Sql Server 2025 For X64-based Systems (gdr), Microsoft Sql Server 2025 For X64-based Systems \(cu9\) and 2 more 2026-10-24 6.6 Medium
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-88088 1 Microsoft 7 Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\), Microsoft Sql Server 2025 For X64-based Systems (gdr) and 4 more 2026-10-24 7 High
Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-88089 1 Microsoft 9 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 6 more 2026-10-24 6.7 Medium
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
CVE-2026-68883 1 Microsoft 13 Microsoft Sql Server 2017 (gdr), Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 (gdr) and 10 more 2026-10-23 8.5 High
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-85876 1 Microsoft 7 Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\), Microsoft Sql Server 2025 For X64-based Systems (gdr) and 4 more 2026-10-23 7 High
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-67626 1 Microsoft 6 Microsoft Sql Server 2022 (gdr), Microsoft Sql Server 2022 For X64-based Systems \(cu27\), Microsoft Sql Server 2025 For X64-based Systems (gdr) and 3 more 2026-10-23 6.5 Medium
Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.
CVE-2026-88082 1 Microsoft 7 Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\), Microsoft Sql Server 2025 For X64-based Systems (gdr) and 4 more 2026-10-23 7 High
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-88083 1 Microsoft 6 Microsoft Sql Server 2022 (gdr), Microsoft Sql Server 2022 For X64-based Systems \(cu27\), Microsoft Sql Server 2025 For X64-based Systems (gdr) and 3 more 2026-10-23 7.5 High
Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-85888 1 Microsoft 11 Microsoft Sql Server 2017 (gdr), Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 (gdr) and 8 more 2026-10-23 7.7 High
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-88086 1 Microsoft 10 Microsoft Sql Server 2019 (gdr), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 (gdr) and 7 more 2026-10-23 5.3 Medium
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-85919 1 Microsoft 10 Microsoft Sql Server 2019 (gdr), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 (gdr) and 7 more 2026-10-23 7 High
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-94520 1 Microsoft 12 Microsoft Sql Server 2017 (gdr), Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 (gdr) and 9 more 2026-10-23 4.9 Medium
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
CVE-2026-88081 1 Microsoft 13 Microsoft Sql Server 2017 (gdr), Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 (gdr) and 10 more 2026-10-20 7.7 High
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-96956 1 Microsoft 8 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more 2026-10-19 8 High
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-70189 1 Microsoft 9 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 6 more 2026-10-18 6.7 Medium
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
CVE-2026-67625 1 Microsoft 12 Microsoft Sql Server 2017 (gdr), Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 (gdr) and 9 more 2026-10-17 8.5 High
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-65674 1 Microsoft 9 Microsoft Sql Server 2019 (gdr), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 (gdr) and 6 more 2026-10-17 8.8 High
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.