CVE-2026-67643

Microsoft SQL Server 2016 does not properly perform a cast of an unspecified pointer, allowing remote authenticated users to gain privileges via unknown vectors.

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

The vulnerability in Microsoft SQL Server 7.0 allows the Mixed Mode authentication mechanism to store the System Administrator (sa) account password in plaintext in a log file, which is accessible to any user.

Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. The vulnerability can be exploited remotely, posing a serious threat to system integrity.

Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally. The vulnerability can be exploited to gain higher privileges on the system.

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. The vulnerability can be exploited remotely without authentication, posing a serious threat.

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. The vulnerability can be exploited to gain higher privileges on the system.

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. The vulnerability can be exploited to remotely read data.