Microsoft Microsoft SQL Server 2025 for x64-based Systems (GDR) vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Microsoft SQL Server 2025 for x64-based Systems (GDR): 91 record(s), with affected versions and fixes.
CVE-2026-96956
High · 8.0
CWE-121 Oct 13, 2026
SQL Server Elevation of Privilege Vulnerability
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-94520
Medium · 4.9
CWE-134 Oct 13, 2026
Microsoft SQL Server Denial of Service Vulnerability
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
CVE-2026-94512
High · 8.8
CWE-122 Oct 13, 2026
SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-88089
Medium · 6.7
CWE-20 Oct 13, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
CVE-2026-88088
High · 7.0
CWE-190 Oct 13, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-88086
Medium · 5.3
CWE-125 Oct 13, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-88085
Medium · 6.4
CWE-122 Oct 13, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-88083
High · 7.5
CWE-121 Oct 13, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88082
High · 7.0
CWE-122 Oct 13, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-88081
High · 7.7
CWE-125 Oct 13, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-85919
High · 7.0
CWE-122 Oct 13, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-85888
High · 7.7
CWE-125 Oct 13, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-85886
High · 8.5
CWE-122 Oct 13, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-85876
High · 7.0
CWE-416 Oct 13, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-83945
Medium · 6.6
CWE-122 Oct 13, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-70189
Medium · 6.7
CWE-122 Oct 13, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
CVE-2026-68883
High · 8.5
CWE-122 Oct 13, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-67628
Medium · 4.9
CWE-125 Oct 13, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67626
Medium · 6.5
CWE-400 Oct 13, 2026
Microsoft SQL Server Denial of Service Vulnerability
Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.
CVE-2026-67625
High · 8.5
CWE-122 Oct 13, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-65674
High · 8.8
CWE-502 Oct 13, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-77488
Medium · 5.5
CWE-191 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.
CVE-2026-77487
High · 8.8
CWE-284 Sep 8, 2026
SQL Server Elevation of Privilege Vulnerability
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-77485
High · 7.0
CWE-416 Sep 8, 2026
SQL Server Elevation of Privilege Vulnerability
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-77484
High · 8.8
CWE-502 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.