Vulnerabilidades do Microsoft Microsoft SQL Server 2025 (CU8)

CVE-2026-67386 Média · 6.5 CWE-908 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67385 Alta · 8.8 CWE-416 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Use after free in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67384 Alta · 8.8 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67383 Média · 6.5 CWE-209 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67381 Alta · 8.8 CWE-122 08/09/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-67380 Alta · 8.8 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67379 Alta · 8.5 CWE-121 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67378 Crítica · 9.0 CWE-822 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.

CVE-2026-67376 Alta · 7.5 CWE-190 08/09/2026

Microsoft SQL Server Denial of Service Vulnerability

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.

CVE-2026-67373 Alta · 8.8 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67370 Alta · 8.8 CWE-89 08/09/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-67369 Média · 6.5 CWE-125 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67368 Alta · 8.8 CWE-59 08/09/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-66820 Alta · 8.8 CWE-89 08/09/2026

SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-66819 Alta · 8.8 CWE-89 08/09/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-66818 Alta · 8.8 CWE-269 08/09/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-66816 Média · 6.5 CWE-778 08/09/2026

Microsoft SQL Server Security Feature Bypass Vulnerability

Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.

CVE-2026-66814 Alta · 8.8 CWE-1220 08/09/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-47297 Alta · 8.1 CWE-502 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.