6.5
Moyenne
CVE-2026-67383 Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose…
Description
Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft SQL Server 2025 (CU8) 17.0 | 17.0.0.0 → < 17.0.4085.5 | 17.0.4085.5 |
| Microsoft SQL Server 2025 for x64-based Systems (GDR) 17.0 | 17.0.1050.2 → < 17.0.1135.8 | 17.0.1135.8 |
Références
- Microsoft SQL Server Information Disclosure Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Microsoft SQL Server 2025 (CU8)
Les 69 CVE de Microsoft SQL Server 2025 (CU8) →
CVE-2026-88088
Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally
7.0
Élevée
CVE-2026-88086
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network
5.3
Moyenne
CVE-2026-88085
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally
6.4
Moyenne
CVE-2026-85919
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally
7.0
Élevée