CVE-2026-70189

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network. An attacker could exploit this to disrupt service availability.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. An attacker could exploit this to run arbitrary code in the context of the SQL Server process.

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network. An attacker could exploit this to access sensitive data.

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. The vulnerability resides in the database component and requires prior access to the system.

Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network. Resource exhaustion may render the service unavailable.

An out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

A heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

A use-after-free vulnerability in SQL Server allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. The vulnerability affects the database component and requires valid credentials.