Search
Find a vulnerability
Search criteria
42 vulnerabilities found for Microsoft SQL Server 2025 for x64-based Systems (CU9) by Microsoft
CVE-2026-96956 (GCVE-0-2026-96956)
Vulnerability from nvd – Published: 2026-10-13 20:35 – Updated: 2026-10-13 22:13
VLAI
EPSS
VEX
Title
SQL Server Elevation of Privilege Vulnerability
Summary
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:59 UTC
CWE
- CWE-121 - Stack-based Buffer Overflow
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
8 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (GDR) |
Affected:
14.0.0 , < 14.0.2140.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2017 for x64-based Systems (CU31) |
Affected:
14.0.3006.16 , < 14.0.3560.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-96956",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:59:46.864724Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:22.957Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.2140.2",
"status": "affected",
"version": "14.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.3560.2",
"status": "affected",
"version": "14.0.3006.16",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0.3560.2",
"versionStartIncluding": "14.0.3006.16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*",
"versionEndExcluding": "14.0.2140.2",
"versionStartIncluding": "14.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121: Stack-based Buffer Overflow",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:13:19.340Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "SQL Server Elevation of Privilege Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96956"
}
],
"title": "SQL Server Elevation of Privilege Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-96956",
"datePublished": "2026-10-13T20:35:45.884Z",
"dateReserved": "2026-09-23T20:35:19.929Z",
"dateUpdated": "2026-10-13T22:13:19.340Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-94520 (GCVE-0-2026-94520)
Vulnerability from nvd – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
Microsoft SQL Server Denial of Service Vulnerability
Summary
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:55 UTC
CWE
- CWE-134 - Use of Externally-Controlled Format String
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
8 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (GDR) |
Affected:
14.0.0 , < 14.0.2140.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2017 for x64-based Systems (CU31) |
Affected:
14.0.3006.16 , < 14.0.3560.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-94520",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:55:13.545283Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:19.993Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.2140.2",
"status": "affected",
"version": "14.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.3560.2",
"status": "affected",
"version": "14.0.3006.16",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0.3560.2",
"versionStartIncluding": "14.0.3006.16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*",
"versionEndExcluding": "14.0.2140.2",
"versionStartIncluding": "14.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-134",
"description": "CWE-134: Use of Externally-Controlled Format String",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:47.295Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Denial of Service Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94520"
}
],
"title": "Microsoft SQL Server Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-94520",
"datePublished": "2026-10-13T20:37:27.748Z",
"dateReserved": "2026-09-21T18:23:52.967Z",
"dateUpdated": "2026-10-13T22:23:47.295Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-94512 (GCVE-0-2026-94512)
Vulnerability from nvd – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
SQL Server Remote Code Execution Vulnerability
Summary
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:55 UTC
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
8 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (GDR) |
Affected:
14.0.0 , < 14.0.2140.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2017 for x64-based Systems (CU31) |
Affected:
14.0.3006.16 , < 14.0.3560.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-94512",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:55:05.870580Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:20.297Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.2140.2",
"status": "affected",
"version": "14.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.3560.2",
"status": "affected",
"version": "14.0.3006.16",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*",
"versionEndExcluding": "14.0.2140.2",
"versionStartIncluding": "14.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0.3560.2",
"versionStartIncluding": "14.0.3006.16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:46.794Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "SQL Server Remote Code Execution Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94512"
}
],
"title": "SQL Server Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-94512",
"datePublished": "2026-10-13T20:37:27.679Z",
"dateReserved": "2026-09-21T18:23:52.966Z",
"dateUpdated": "2026-10-13T22:23:46.794Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-88089 (GCVE-0-2026-88089)
Vulnerability from nvd – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
Microsoft SQL Server Remote Code Execution Vulnerability
Summary
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:54 UTC
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
9 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (GDR) |
Affected:
14.0.0 , < 14.0.2140.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2017 for x64-based Systems (CU31) |
Affected:
14.0.3006.16 , < 14.0.3560.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 (CU8) |
Affected:
-
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-88089",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:54:56.718442Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:20.448Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.2140.2",
"status": "affected",
"version": "14.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.3560.2",
"status": "affected",
"version": "14.0.3006.16",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 (CU8)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0.3560.2",
"versionStartIncluding": "14.0.3006.16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*",
"versionEndExcluding": "14.0.2140.2",
"versionStartIncluding": "14.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en-US",
"type": "CWE"
},
{
"cweId": "CWE-20",
"description": "CWE-20: Improper Input Validation",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:22.856Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Remote Code Execution Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88089"
}
],
"title": "Microsoft SQL Server Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-88089",
"datePublished": "2026-10-13T20:37:23.926Z",
"dateReserved": "2026-09-09T21:47:30.203Z",
"dateUpdated": "2026-10-13T22:23:22.856Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-88088 (GCVE-0-2026-88088)
Vulnerability from nvd – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
Microsoft SQL Server Elevation of Privilege Vulnerability
Summary
Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:55 UTC
CWE
- CWE-190 - Integer Overflow or Wraparound
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
7 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 (CU8) |
Affected:
-
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-88088",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:55:27.401413Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:20.865Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 (CU8)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-190",
"description": "CWE-190: Integer Overflow or Wraparound",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:21.765Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Elevation of Privilege Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88088"
}
],
"title": "Microsoft SQL Server Elevation of Privilege Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-88088",
"datePublished": "2026-10-13T20:37:23.763Z",
"dateReserved": "2026-09-09T21:47:30.203Z",
"dateUpdated": "2026-10-13T22:23:21.765Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-88086 (GCVE-0-2026-88086)
Vulnerability from nvd – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
Microsoft SQL Server Information Disclosure Vulnerability
Summary
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:55 UTC
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
7 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 (CU8) |
Affected:
-
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-88086",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:55:43.350396Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:21.282Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 (CU8)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:20.656Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Information Disclosure Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88086"
}
],
"title": "Microsoft SQL Server Information Disclosure Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-88086",
"datePublished": "2026-10-13T20:37:23.591Z",
"dateReserved": "2026-09-09T21:47:30.203Z",
"dateUpdated": "2026-10-13T22:23:20.656Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-88085 (GCVE-0-2026-88085)
Vulnerability from nvd – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
Microsoft SQL Server Elevation of Privilege Vulnerability
Summary
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:55 UTC
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
9 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (GDR) |
Affected:
14.0.0 , < 14.0.2140.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2017 for x64-based Systems (CU31) |
Affected:
14.0.3006.16 , < 14.0.3560.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 (CU8) |
Affected:
-
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-88085",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:55:20.770532Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:20.593Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.2140.2",
"status": "affected",
"version": "14.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.3560.2",
"status": "affected",
"version": "14.0.3006.16",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 (CU8)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0.3560.2",
"versionStartIncluding": "14.0.3006.16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*",
"versionEndExcluding": "14.0.2140.2",
"versionStartIncluding": "14.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:22.370Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Elevation of Privilege Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88085"
}
],
"title": "Microsoft SQL Server Elevation of Privilege Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-88085",
"datePublished": "2026-10-13T20:37:23.843Z",
"dateReserved": "2026-09-09T21:47:30.203Z",
"dateUpdated": "2026-10-13T22:23:22.370Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-88083 (GCVE-0-2026-88083)
Vulnerability from nvd – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
Microsoft SQL Server Remote Code Execution Vulnerability
Summary
Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 22:01 UTC
CWE
- CWE-121 - Stack-based Buffer Overflow
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2022 (CU 26) |
Affected:
-
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 (CU8) |
Affected:
-
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-88083",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T22:01:34.372200Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:22.403Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (CU 26)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 (CU8)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121: Stack-based Buffer Overflow",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:18.513Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Remote Code Execution Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88083"
}
],
"title": "Microsoft SQL Server Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-88083",
"datePublished": "2026-10-13T20:37:22.743Z",
"dateReserved": "2026-09-09T21:47:30.203Z",
"dateUpdated": "2026-10-13T22:23:18.513Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-88082 (GCVE-0-2026-88082)
Vulnerability from nvd – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
Microsoft SQL Server Elevation of Privilege Vulnerability
Summary
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:57 UTC
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
7 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 (CU8) |
Affected:
-
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-88082",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:57:39.521435Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:12.739Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 (CU8)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:17.948Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Elevation of Privilege Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88082"
}
],
"title": "Microsoft SQL Server Elevation of Privilege Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-88082",
"datePublished": "2026-10-13T20:37:22.653Z",
"dateReserved": "2026-09-09T21:47:30.203Z",
"dateUpdated": "2026-10-13T22:23:17.948Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-88081 (GCVE-0-2026-88081)
Vulnerability from nvd – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
Microsoft SQL Server Information Disclosure Vulnerability
Summary
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:55 UTC
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
9 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (GDR) |
Affected:
14.0.0 , < 14.0.2140.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2017 for x64-based Systems (CU31) |
Affected:
14.0.3006.16 , < 14.0.3560.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 (CU8) |
Affected:
-
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-88081",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:55:50.497645Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:22.127Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.2140.2",
"status": "affected",
"version": "14.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.3560.2",
"status": "affected",
"version": "14.0.3006.16",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 (CU8)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0.3560.2",
"versionStartIncluding": "14.0.3006.16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*",
"versionEndExcluding": "14.0.2140.2",
"versionStartIncluding": "14.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:19.076Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Information Disclosure Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88081"
}
],
"title": "Microsoft SQL Server Information Disclosure Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-88081",
"datePublished": "2026-10-13T20:37:22.832Z",
"dateReserved": "2026-09-09T21:47:30.202Z",
"dateUpdated": "2026-10-13T22:23:19.076Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-85919 (GCVE-0-2026-85919)
Vulnerability from nvd – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
Microsoft SQL Server Elevation of Privilege Vulnerability
Summary
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:55 UTC
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
7 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 (CU8) |
Affected:
-
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-85919",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:55:34.373555Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:21.146Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 (CU8)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:21.222Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Elevation of Privilege Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85919"
}
],
"title": "Microsoft SQL Server Elevation of Privilege Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-85919",
"datePublished": "2026-10-13T20:37:23.670Z",
"dateReserved": "2026-09-04T18:21:15.993Z",
"dateUpdated": "2026-10-13T22:23:21.222Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-85888 (GCVE-0-2026-85888)
Vulnerability from nvd – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
Microsoft SQL Server Information Disclosure Vulnerability
Summary
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:56 UTC
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
8 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (GDR) |
Affected:
14.0.0 , < 14.0.2140.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2017 for x64-based Systems (CU31) |
Affected:
14.0.3006.16 , < 14.0.3560.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-85888",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:56:12.354422Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:21.875Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.2140.2",
"status": "affected",
"version": "14.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.3560.2",
"status": "affected",
"version": "14.0.3006.16",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*",
"versionEndExcluding": "14.0.2140.2",
"versionStartIncluding": "14.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0.3560.2",
"versionStartIncluding": "14.0.3006.16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:19.649Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Information Disclosure Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85888"
}
],
"title": "Microsoft SQL Server Information Disclosure Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-85888",
"datePublished": "2026-10-13T20:37:22.909Z",
"dateReserved": "2026-09-04T18:18:19.327Z",
"dateUpdated": "2026-10-13T22:23:19.649Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-85886 (GCVE-0-2026-85886)
Vulnerability from nvd – Published: 2026-10-13 20:36 – Updated: 2026-10-13 22:18
VLAI
EPSS
VEX
Title
Microsoft SQL Server Remote Code Execution Vulnerability
Summary
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 22:00 UTC
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
8 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (GDR) |
Affected:
14.0.0 , < 14.0.2140.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2017 for x64-based Systems (CU31) |
Affected:
14.0.3006.16 , < 14.0.3560.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-85886",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T22:00:59.359771Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:22.554Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.2140.2",
"status": "affected",
"version": "14.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.3560.2",
"status": "affected",
"version": "14.0.3006.16",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0.3560.2",
"versionStartIncluding": "14.0.3006.16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*",
"versionEndExcluding": "14.0.2140.2",
"versionStartIncluding": "14.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:18:35.759Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Remote Code Execution Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85886"
}
],
"title": "Microsoft SQL Server Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-85886",
"datePublished": "2026-10-13T20:36:36.852Z",
"dateReserved": "2026-09-04T18:18:19.327Z",
"dateUpdated": "2026-10-13T22:18:35.759Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-85876 (GCVE-0-2026-85876)
Vulnerability from nvd – Published: 2026-10-13 20:36 – Updated: 2026-10-13 22:18
VLAI
EPSS
VEX
Title
Microsoft SQL Server Elevation of Privilege Vulnerability
Summary
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:57 UTC
CWE
- CWE-416 - Use After Free
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
7 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 (CU8) |
Affected:
-
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-85876",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:57:43.046473Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:12.875Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 (CU8)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Use after free in SQL Server allows an authorized attacker to elevate privileges locally."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "CWE-416: Use After Free",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:18:35.249Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Elevation of Privilege Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85876"
}
],
"title": "Microsoft SQL Server Elevation of Privilege Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-85876",
"datePublished": "2026-10-13T20:36:36.776Z",
"dateReserved": "2026-09-04T18:18:19.325Z",
"dateUpdated": "2026-10-13T22:18:35.249Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-83945 (GCVE-0-2026-83945)
Vulnerability from nvd – Published: 2026-10-13 20:36 – Updated: 2026-10-13 22:18
VLAI
EPSS
VEX
Title
Microsoft SQL Server Remote Code Execution Vulnerability
Summary
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 22:01 UTC
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 (CU8) |
Affected:
-
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-83945",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T22:01:04.662566Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:22.821Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 (CU8)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:18:34.726Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Remote Code Execution Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83945"
}
],
"title": "Microsoft SQL Server Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-83945",
"datePublished": "2026-10-13T20:36:36.717Z",
"dateReserved": "2026-08-31T23:40:59.641Z",
"dateUpdated": "2026-10-13T22:18:34.726Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70189 (GCVE-0-2026-70189)
Vulnerability from nvd – Published: 2026-10-13 20:36 – Updated: 2026-10-13 22:18
VLAI
EPSS
VEX
Title
Microsoft SQL Server Remote Code Execution Vulnerability
Summary
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 20:53 UTC
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
9 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (GDR) |
Affected:
14.0.0 , < 14.0.2140.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2017 for x64-based Systems (CU31) |
Affected:
14.0.3006.16 , < 14.0.3560.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 (CU8) |
Affected:
-
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-70189",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T20:53:02.247819Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T20:54:48.748Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.2140.2",
"status": "affected",
"version": "14.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.3560.2",
"status": "affected",
"version": "14.0.3006.16",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 (CU8)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0.3560.2",
"versionStartIncluding": "14.0.3006.16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*",
"versionEndExcluding": "14.0.2140.2",
"versionStartIncluding": "14.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:18:34.193Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Remote Code Execution Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70189"
}
],
"title": "Microsoft SQL Server Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-70189",
"datePublished": "2026-10-13T20:36:36.638Z",
"dateReserved": "2026-08-03T23:48:30.860Z",
"dateUpdated": "2026-10-13T22:18:34.193Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-68883 (GCVE-0-2026-68883)
Vulnerability from nvd – Published: 2026-10-13 20:36 – Updated: 2026-10-13 22:18
VLAI
EPSS
VEX
Title
Microsoft SQL Server Elevation of Privilege Vulnerability
Summary
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:10 UTC
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
9 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (GDR) |
Affected:
14.0.0 , < 14.0.2140.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2017 for x64-based Systems (CU31) |
Affected:
14.0.3006.16 , < 14.0.3560.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 (CU8) |
Affected:
-
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-68883",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:10:00.798790Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T21:15:29.365Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.2140.2",
"status": "affected",
"version": "14.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.3560.2",
"status": "affected",
"version": "14.0.3006.16",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 (CU8)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0.3560.2",
"versionStartIncluding": "14.0.3006.16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*",
"versionEndExcluding": "14.0.2140.2",
"versionStartIncluding": "14.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:18:33.767Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Elevation of Privilege Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68883"
}
],
"title": "Microsoft SQL Server Elevation of Privilege Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-68883",
"datePublished": "2026-10-13T20:36:36.565Z",
"dateReserved": "2026-07-31T20:06:14.674Z",
"dateUpdated": "2026-10-13T22:18:33.767Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-67628 (GCVE-0-2026-67628)
Vulnerability from nvd – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:20
VLAI
EPSS
VEX
Title
Microsoft SQL Server Information Disclosure Vulnerability
Summary
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:10 UTC
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
8 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (GDR) |
Affected:
14.0.0 , < 14.0.2140.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2017 for x64-based Systems (CU31) |
Affected:
14.0.3006.16 , < 14.0.3560.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-67628",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:10:10.650919Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T21:15:29.608Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.2140.2",
"status": "affected",
"version": "14.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.3560.2",
"status": "affected",
"version": "14.0.3006.16",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*",
"versionEndExcluding": "14.0.2140.2",
"versionStartIncluding": "14.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0.3560.2",
"versionStartIncluding": "14.0.3006.16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:20:46.976Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Information Disclosure Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67628"
}
],
"title": "Microsoft SQL Server Information Disclosure Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-67628",
"datePublished": "2026-10-13T20:37:01.266Z",
"dateReserved": "2026-07-29T22:49:19.795Z",
"dateUpdated": "2026-10-13T22:20:46.976Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-67626 (GCVE-0-2026-67626)
Vulnerability from nvd – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:20
VLAI
EPSS
VEX
Title
Microsoft SQL Server Denial of Service Vulnerability
Summary
Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:10 UTC
CWE
- CWE-400 - Uncontrolled Resource Consumption
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-67626",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:10:14.633329Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T21:15:29.729Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "CWE-400: Uncontrolled Resource Consumption",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:20:46.547Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Denial of Service Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67626"
}
],
"title": "Microsoft SQL Server Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-67626",
"datePublished": "2026-10-13T20:37:01.187Z",
"dateReserved": "2026-07-29T22:49:19.795Z",
"dateUpdated": "2026-10-13T22:20:46.547Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-67625 (GCVE-0-2026-67625)
Vulnerability from nvd – Published: 2026-10-13 20:36 – Updated: 2026-10-13 22:15
VLAI
EPSS
VEX
Title
Microsoft SQL Server Remote Code Execution Vulnerability
Summary
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:10 UTC
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
8 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (GDR) |
Affected:
14.0.0 , < 14.0.2140.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2017 for x64-based Systems (CU31) |
Affected:
14.0.3006.16 , < 14.0.3560.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-67625",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:10:18.566082Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T21:15:29.855Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.2140.2",
"status": "affected",
"version": "14.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.3560.2",
"status": "affected",
"version": "14.0.3006.16",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0.3560.2",
"versionStartIncluding": "14.0.3006.16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*",
"versionEndExcluding": "14.0.2140.2",
"versionStartIncluding": "14.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:15:09.150Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Remote Code Execution Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67625"
}
],
"title": "Microsoft SQL Server Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-67625",
"datePublished": "2026-10-13T20:36:05.644Z",
"dateReserved": "2026-07-29T22:49:19.795Z",
"dateUpdated": "2026-10-13T22:15:09.150Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-65674 (GCVE-0-2026-65674)
Vulnerability from nvd – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:20
VLAI
EPSS
VEX
Title
Microsoft SQL Server Remote Code Execution Vulnerability
Summary
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:10 UTC
CWE
- CWE-502 - Deserialization of Untrusted Data
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-65674",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:10:26.282137Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T21:15:30.113Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-502",
"description": "CWE-502: Deserialization of Untrusted Data",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:20:46.112Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Remote Code Execution Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65674"
}
],
"title": "Microsoft SQL Server Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-65674",
"datePublished": "2026-10-13T20:37:01.110Z",
"dateReserved": "2026-07-22T18:16:01.898Z",
"dateUpdated": "2026-10-13T22:20:46.112Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-94520 (GCVE-0-2026-94520)
Vulnerability from cvelistv5 – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
Microsoft SQL Server Denial of Service Vulnerability
Summary
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:55 UTC
CWE
- CWE-134 - Use of Externally-Controlled Format String
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
8 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (GDR) |
Affected:
14.0.0 , < 14.0.2140.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2017 for x64-based Systems (CU31) |
Affected:
14.0.3006.16 , < 14.0.3560.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-94520",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:55:13.545283Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:19.993Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.2140.2",
"status": "affected",
"version": "14.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.3560.2",
"status": "affected",
"version": "14.0.3006.16",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0.3560.2",
"versionStartIncluding": "14.0.3006.16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*",
"versionEndExcluding": "14.0.2140.2",
"versionStartIncluding": "14.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-134",
"description": "CWE-134: Use of Externally-Controlled Format String",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:47.295Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Denial of Service Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94520"
}
],
"title": "Microsoft SQL Server Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-94520",
"datePublished": "2026-10-13T20:37:27.748Z",
"dateReserved": "2026-09-21T18:23:52.967Z",
"dateUpdated": "2026-10-13T22:23:47.295Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-94512 (GCVE-0-2026-94512)
Vulnerability from cvelistv5 – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
SQL Server Remote Code Execution Vulnerability
Summary
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:55 UTC
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
8 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (GDR) |
Affected:
14.0.0 , < 14.0.2140.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2017 for x64-based Systems (CU31) |
Affected:
14.0.3006.16 , < 14.0.3560.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-94512",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:55:05.870580Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:20.297Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.2140.2",
"status": "affected",
"version": "14.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.3560.2",
"status": "affected",
"version": "14.0.3006.16",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*",
"versionEndExcluding": "14.0.2140.2",
"versionStartIncluding": "14.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0.3560.2",
"versionStartIncluding": "14.0.3006.16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:46.794Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "SQL Server Remote Code Execution Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94512"
}
],
"title": "SQL Server Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-94512",
"datePublished": "2026-10-13T20:37:27.679Z",
"dateReserved": "2026-09-21T18:23:52.966Z",
"dateUpdated": "2026-10-13T22:23:46.794Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-88089 (GCVE-0-2026-88089)
Vulnerability from cvelistv5 – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
Microsoft SQL Server Remote Code Execution Vulnerability
Summary
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:54 UTC
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
9 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (GDR) |
Affected:
14.0.0 , < 14.0.2140.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2017 for x64-based Systems (CU31) |
Affected:
14.0.3006.16 , < 14.0.3560.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 (CU8) |
Affected:
-
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-88089",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:54:56.718442Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:20.448Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.2140.2",
"status": "affected",
"version": "14.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.3560.2",
"status": "affected",
"version": "14.0.3006.16",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 (CU8)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0.3560.2",
"versionStartIncluding": "14.0.3006.16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*",
"versionEndExcluding": "14.0.2140.2",
"versionStartIncluding": "14.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en-US",
"type": "CWE"
},
{
"cweId": "CWE-20",
"description": "CWE-20: Improper Input Validation",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:22.856Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Remote Code Execution Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88089"
}
],
"title": "Microsoft SQL Server Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-88089",
"datePublished": "2026-10-13T20:37:23.926Z",
"dateReserved": "2026-09-09T21:47:30.203Z",
"dateUpdated": "2026-10-13T22:23:22.856Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-88085 (GCVE-0-2026-88085)
Vulnerability from cvelistv5 – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
Microsoft SQL Server Elevation of Privilege Vulnerability
Summary
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:55 UTC
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
9 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (GDR) |
Affected:
14.0.0 , < 14.0.2140.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2017 for x64-based Systems (CU31) |
Affected:
14.0.3006.16 , < 14.0.3560.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 (CU8) |
Affected:
-
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-88085",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:55:20.770532Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:20.593Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.2140.2",
"status": "affected",
"version": "14.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.3560.2",
"status": "affected",
"version": "14.0.3006.16",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 (CU8)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0.3560.2",
"versionStartIncluding": "14.0.3006.16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*",
"versionEndExcluding": "14.0.2140.2",
"versionStartIncluding": "14.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:22.370Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Elevation of Privilege Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88085"
}
],
"title": "Microsoft SQL Server Elevation of Privilege Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-88085",
"datePublished": "2026-10-13T20:37:23.843Z",
"dateReserved": "2026-09-09T21:47:30.203Z",
"dateUpdated": "2026-10-13T22:23:22.370Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-88088 (GCVE-0-2026-88088)
Vulnerability from cvelistv5 – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
Microsoft SQL Server Elevation of Privilege Vulnerability
Summary
Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:55 UTC
CWE
- CWE-190 - Integer Overflow or Wraparound
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
7 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 (CU8) |
Affected:
-
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-88088",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:55:27.401413Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:20.865Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 (CU8)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-190",
"description": "CWE-190: Integer Overflow or Wraparound",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:21.765Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Elevation of Privilege Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88088"
}
],
"title": "Microsoft SQL Server Elevation of Privilege Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-88088",
"datePublished": "2026-10-13T20:37:23.763Z",
"dateReserved": "2026-09-09T21:47:30.203Z",
"dateUpdated": "2026-10-13T22:23:21.765Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-85919 (GCVE-0-2026-85919)
Vulnerability from cvelistv5 – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
Microsoft SQL Server Elevation of Privilege Vulnerability
Summary
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:55 UTC
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
7 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 (CU8) |
Affected:
-
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-85919",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:55:34.373555Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:21.146Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 (CU8)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:21.222Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Elevation of Privilege Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85919"
}
],
"title": "Microsoft SQL Server Elevation of Privilege Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-85919",
"datePublished": "2026-10-13T20:37:23.670Z",
"dateReserved": "2026-09-04T18:21:15.993Z",
"dateUpdated": "2026-10-13T22:23:21.222Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-88086 (GCVE-0-2026-88086)
Vulnerability from cvelistv5 – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
Microsoft SQL Server Information Disclosure Vulnerability
Summary
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:55 UTC
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
7 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 (CU8) |
Affected:
-
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-88086",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:55:43.350396Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:21.282Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 (CU8)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:20.656Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Information Disclosure Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88086"
}
],
"title": "Microsoft SQL Server Information Disclosure Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-88086",
"datePublished": "2026-10-13T20:37:23.591Z",
"dateReserved": "2026-09-09T21:47:30.203Z",
"dateUpdated": "2026-10-13T22:23:20.656Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-85888 (GCVE-0-2026-85888)
Vulnerability from cvelistv5 – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
Microsoft SQL Server Information Disclosure Vulnerability
Summary
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:56 UTC
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
8 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (GDR) |
Affected:
14.0.0 , < 14.0.2140.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2017 for x64-based Systems (CU31) |
Affected:
14.0.3006.16 , < 14.0.3560.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-85888",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:56:12.354422Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:21.875Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.2140.2",
"status": "affected",
"version": "14.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.3560.2",
"status": "affected",
"version": "14.0.3006.16",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*",
"versionEndExcluding": "14.0.2140.2",
"versionStartIncluding": "14.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0.3560.2",
"versionStartIncluding": "14.0.3006.16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:19.649Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Information Disclosure Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85888"
}
],
"title": "Microsoft SQL Server Information Disclosure Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-85888",
"datePublished": "2026-10-13T20:37:22.909Z",
"dateReserved": "2026-09-04T18:18:19.327Z",
"dateUpdated": "2026-10-13T22:23:19.649Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-88081 (GCVE-0-2026-88081)
Vulnerability from cvelistv5 – Published: 2026-10-13 20:37 – Updated: 2026-10-13 22:23
VLAI
EPSS
VEX
Title
Microsoft SQL Server Information Disclosure Vulnerability
Summary
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-13 21:55 UTC
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
9 products
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2017 (GDR) |
Affected:
14.0.0 , < 14.0.2140.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2017 for x64-based Systems (CU31) |
Affected:
14.0.3006.16 , < 14.0.3560.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 (GDR) |
Affected:
15.0.0 , < 15.0.2200.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2019 for x64-based Systems (CU32) |
Affected:
15.0.4003.23 , < 15.0.4500.2
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 (GDR) |
Affected:
16.0.0 , < 16.0.1210.3
(custom)
|
|
| Microsoft | Microsoft SQL Server 2022 for x64-based Systems (CU27) |
Affected:
16.0.4003.1 , < 16.0.4305.5
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 (CU8) |
Affected:
-
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (CU9) |
Affected:
17.0.4006.2 , < 17.0.5015.4
(custom)
|
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) |
Affected:
17.0.1050.2 , < 17.0.1145.4
(custom)
|
Date Public
2026-10-13 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-88081",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T21:55:50.497645Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:06:22.127Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.2140.2",
"status": "affected",
"version": "14.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "14.0.3560.2",
"status": "affected",
"version": "14.0.3006.16",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.2200.2",
"status": "affected",
"version": "15.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "15.0.4500.2",
"status": "affected",
"version": "15.0.4003.23",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.1210.3",
"status": "affected",
"version": "16.0.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "16.0.4305.5",
"status": "affected",
"version": "16.0.4003.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 (CU8)",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "-"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.5015.4",
"status": "affected",
"version": "17.0.4006.2",
"versionType": "custom"
}
]
},
{
"platforms": [
"x64-based Systems"
],
"product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "17.0.1145.4",
"status": "affected",
"version": "17.0.1050.2",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "14.0.3560.2",
"versionStartIncluding": "14.0.3006.16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionStartIncluding": "-",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "17.0.1145.4",
"versionStartIncluding": "17.0.1050.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*",
"versionEndExcluding": "14.0.2140.2",
"versionStartIncluding": "14.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "15.0.2200.2",
"versionStartIncluding": "15.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.0.4500.2",
"versionStartIncluding": "15.0.4003.23",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "16.0.4305.5",
"versionStartIncluding": "16.0.4003.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "17.0.5015.4",
"versionStartIncluding": "17.0.4006.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "16.0.1210.3",
"versionStartIncluding": "16.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-10-13T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T22:23:19.076Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft SQL Server Information Disclosure Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88081"
}
],
"title": "Microsoft SQL Server Information Disclosure Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-88081",
"datePublished": "2026-10-13T20:37:22.832Z",
"dateReserved": "2026-09-09T21:47:30.202Z",
"dateUpdated": "2026-10-13T22:23:19.076Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}