Common Vulnerabilities and Exposures (CVE)

CVE-2026-67639

Sep 8, 2026 23:37:36 UTC

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67638

Sep 8, 2026 23:37:35 UTC

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67393

Sep 8, 2026 23:37:35 UTC

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67390

Sep 8, 2026 23:37:34 UTC

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67388

Sep 8, 2026 23:37:34 UTC

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67386

Sep 8, 2026 23:37:33 UTC

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67385

Sep 8, 2026 23:37:33 UTC

Use after free in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67381

Sep 8, 2026 23:37:32 UTC

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-67380

Sep 8, 2026 23:37:32 UTC

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-66820

Sep 8, 2026 23:37:31 UTC

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-66818

Sep 8, 2026 23:37:30 UTC

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-66816

Sep 8, 2026 23:37:30 UTC

Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.

CVE-2026-66814

Sep 8, 2026 23:37:29 UTC

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-56172

Sep 8, 2026 23:37:29 UTC

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.

CVE-2026-62697

Sep 8, 2026 23:37:28 UTC

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.