SQL Server vulnerabilities
77 known CVE vulnerabilities in SQL Server, translated and rated.
- CVE-2026-96956High
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
- CVE-2026-85888High
An out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.
- CVE-2026-85886High
A heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- CVE-2026-85876High
A use-after-free vulnerability in SQL Server allows an authorized attacker to elevate privileges locally.
- CVE-2026-68883High
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
- CVE-2026-67625High
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- CVE-2026-65674High
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
- CVE-2026-67636Critical
An out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-67378Critical
An untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-65669Critical
Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-54118Critical
A vulnerability in SQL Server allows an unauthorized attacker to execute code over a network through deserialization of untrusted data.
- CVE-2026-54117Critical
A vulnerability in SQL Server allows an unauthorized attacker to execute code over a network through deserialization of untrusted data.
- CVE-2026-78456High
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- CVE-2026-77488Medium
Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.
- CVE-2026-77487High
SQL Server has improper access control that allows an authorized attacker to elevate privileges over a network.
- CVE-2026-77486High
SQL Server has an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code over a network.
- CVE-2026-77485High
SQL Server has a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2026-77484High
SQL Server has a deserialization of untrusted data vulnerability that allows an authorized attacker to execute code over a network.
- CVE-2026-77483High
SQL Server has weak authentication that allows an authorized attacker to elevate privileges over a network.
- CVE-2026-77482High
SQL Server has a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code over a network.
- CVE-2026-77481High
SQL Server has a heap-based buffer overflow vulnerability that allows an authorized attacker to execute code over a network.
- CVE-2026-77480High
SQL Server has insufficient granularity of access control that allows an authorized attacker to elevate privileges over a network.
- CVE-2026-73029Medium
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
- CVE-2026-73028High
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69562Medium
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.
- CVE-2026-68787High
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
- CVE-2026-68786High
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- CVE-2026-68785Medium
A vulnerability in SQL Server involves a heap-based buffer overflow. An authorized attacker could exploit this to execute code over a network.
- CVE-2026-68784Medium
Out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.
- CVE-2026-68781Medium
Out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.
- CVE-2026-68780Medium
Out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.
- CVE-2026-68779Medium
Out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.
- CVE-2026-68778Medium
Out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.
- CVE-2026-68777Medium
Out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.
- CVE-2026-68776Medium
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
- CVE-2026-68775High
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- CVE-2026-67648Medium
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
- CVE-2026-67645Medium
Out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.
- CVE-2026-67642High
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- CVE-2026-67641Medium
Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.
- CVE-2026-67639High
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- CVE-2026-67638High
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- CVE-2026-67633Medium
An out-of-bounds read vulnerability in SQL Server allows an authorized attacker to cause a denial of service over a network.
- CVE-2026-67630Medium
An out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.
- CVE-2026-67629Medium
An out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.
- CVE-2026-67624Medium
An out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.
- CVE-2026-67393Medium
A buffer over-read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.
- CVE-2026-67390Medium
A buffer over-read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.
- CVE-2026-67389Medium
An out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.
- CVE-2026-67388High
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

