CVE-2026-73028

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

SQL Server has improper access control that allows an authorized attacker to elevate privileges over a network.

SQL Server has an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code over a network.

SQL Server has a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.

SQL Server has a deserialization of untrusted data vulnerability that allows an authorized attacker to execute code over a network.

SQL Server has weak authentication that allows an authorized attacker to elevate privileges over a network.

SQL Server has a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code over a network.

SQL Server has a heap-based buffer overflow vulnerability that allows an authorized attacker to execute code over a network.

SQL Server has insufficient granularity of access control that allows an authorized attacker to elevate privileges over a network.

Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.