Vulnerabilidades do Microsoft Microsoft SQL Server 2022 for x64-based Systems (CU27)

CVE-2026-96956 Alta · 8.0 CWE-121 13/10/2026

SQL Server Elevation of Privilege Vulnerability

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-94520 Média · 4.9 CWE-134 13/10/2026

Microsoft SQL Server Denial of Service Vulnerability

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

CVE-2026-94512 Alta · 8.8 CWE-122 13/10/2026

SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-88089 Média · 6.7 CWE-20 13/10/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

CVE-2026-88088 Alta · 7.0 CWE-190 13/10/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88086 Média · 5.3 CWE-125 13/10/2026

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.

CVE-2026-88085 Média · 6.4 CWE-122 13/10/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88083 Alta · 7.5 CWE-121 13/10/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88082 Alta · 7.0 CWE-122 13/10/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88081 Alta · 7.7 CWE-125 13/10/2026

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-85919 Alta · 7.0 CWE-122 13/10/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

CVE-2026-85888 Alta · 7.7 CWE-125 13/10/2026

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-85886 Alta · 8.5 CWE-122 13/10/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-85876 Alta · 7.0 CWE-416 13/10/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

CVE-2026-83945 Média · 6.6 CWE-122 13/10/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-70189 Média · 6.7 CWE-122 13/10/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

CVE-2026-68883 Alta · 8.5 CWE-122 13/10/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-67628 Média · 4.9 CWE-125 13/10/2026

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67626 Média · 6.5 CWE-400 13/10/2026

Microsoft SQL Server Denial of Service Vulnerability

Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.

CVE-2026-67625 Alta · 8.5 CWE-122 13/10/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-65674 Alta · 8.8 CWE-502 13/10/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-32176 Alta · 7.8 CWE-89 14/04/2026

SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.