Vulnerabilidades do Microsoft Sql Server 2022

CVE-2026-67639 Alta · 8.8 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67636 Crítica · 9.0 CWE-125 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.

CVE-2026-67633 Média · 6.5 CWE-125 08/09/2026

Microsoft SQL Server Denial of Service Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.

CVE-2026-67631 Crítica · 9.8 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

CVE-2026-67630 Média · 6.5 CWE-125 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67629 Média · 6.5 CWE-125 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67624 Média · 6.5 CWE-125 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67393 Média · 6.5 CWE-126 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67390 Média · 6.5 CWE-126 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67389 Média · 6.5 CWE-125 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67388 Alta · 8.8 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67386 Média · 6.5 CWE-908 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67385 Alta · 8.8 CWE-416 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Use after free in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67384 Alta · 8.8 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67381 Alta · 8.8 CWE-122 08/09/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-67380 Alta · 8.8 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67379 Alta · 8.5 CWE-121 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67378 Crítica · 9.0 CWE-822 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.

CVE-2026-67376 Alta · 7.5 CWE-190 08/09/2026

Microsoft SQL Server Denial of Service Vulnerability

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.

CVE-2026-67370 Alta · 8.8 CWE-89 08/09/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-67368 Alta · 8.8 CWE-59 08/09/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-66820 Alta · 8.8 CWE-89 08/09/2026

SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-66819 Alta · 8.8 CWE-89 08/09/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-66818 Alta · 8.8 CWE-269 08/09/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-66816 Média · 6.5 CWE-778 08/09/2026

Microsoft SQL Server Security Feature Bypass Vulnerability

Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.