Vulnerabilidades do Microsoft Sql Server 2025

CVE-2026-77488 Média · 5.5 CWE-191 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.

CVE-2026-77487 Alta · 8.8 CWE-284 08/09/2026

SQL Server Elevation of Privilege Vulnerability

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-77485 Alta · 7.0 CWE-416 08/09/2026

SQL Server Elevation of Privilege Vulnerability

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

CVE-2026-77484 Alta · 8.8 CWE-502 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-77483 Alta · 8.8 CWE-1390 08/09/2026

SQL Server Elevation of Privilege Vulnerability

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-77481 Alta · 8.8 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-77480 Alta · 8.8 CWE-1220 08/09/2026

SQL Server Elevation of Privilege Vulnerability

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-73029 Média · 6.5 CWE-126 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-73028 Alta · 8.8 CWE-284 08/09/2026

SQL Server Elevation of Privilege Vulnerability

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-68787 Alta · 7.8 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

CVE-2026-68786 Alta · 8.8 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-68785 Média · 4.9 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-68784 Média · 6.5 CWE-125 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-68781 Média · 6.5 CWE-125 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-68780 Média · 6.5 CWE-125 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-68779 Média · 6.5 CWE-125 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-68778 Média · 6.5 CWE-125 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-68777 Média · 6.5 CWE-125 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-68776 Média · 6.5 CWE-908 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-68775 Alta · 8.8 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67648 Média · 6.5 CWE-908 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67645 Média · 6.5 CWE-125 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67643 Crítica · 9.8 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

CVE-2026-67642 Alta · 8.8 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67641 Média · 6.5 CWE-190 08/09/2026

Microsoft SQL Server Denial of Service Vulnerability

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.