CVE-2026-77486
HighCVSS 8.8Summary
SQL Server has an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code over a network.
Risk Assessment
An unauthorized attacker could remotely execute code on the server, potentially leading to full system and data compromise.
Recommendation
Install security updates for SQL Server and restrict network access to the service.
Other vulnerabilities in SQL Server
See all- CVE-2026-78456High
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- CVE-2026-77487High
SQL Server has improper access control that allows an authorized attacker to elevate privileges over a network.
- CVE-2026-77485High
SQL Server has a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2026-77484High
SQL Server has a deserialization of untrusted data vulnerability that allows an authorized attacker to execute code over a network.
- CVE-2026-77483High
SQL Server has weak authentication that allows an authorized attacker to elevate privileges over a network.
- CVE-2026-77482High
SQL Server has a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code over a network.
- CVE-2026-77481High
SQL Server has a heap-based buffer overflow vulnerability that allows an authorized attacker to execute code over a network.
- CVE-2026-77480High
SQL Server has insufficient granularity of access control that allows an authorized attacker to elevate privileges over a network.
- CVE-2026-73028High
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
- CVE-2026-65669Critical
Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.
Original NVD description (English source)
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.