CVE-2026-42990

CriticalCVSS 9.8

Published: 14/07/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.66%

48th percentile - higher than 48% of all known CVEs

Summary

Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.

Risk Assessment

An attacker can remotely execute arbitrary code on the database server, leading to data confidentiality and integrity breaches and potential system takeover.

Recommendation

Apply security patches from Microsoft for the SQL Server ODBC driver immediately.

Original NVD description (English source)

Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.