Common Vulnerabilities and Exposures (CVE)
CVE-2026-67639
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67638
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67393
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67390
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67388
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67386
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67385
Use after free in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67381
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-67380
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-66820
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66818
Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66816
Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.
CVE-2026-66814
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-56172
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
CVE-2026-62697
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.