CVE-2026-67642 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network

Description

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Microsoft SQL Server 2025 (CU8) 17.0	17.0.0.0 → < 17.0.4085.5	17.0.4085.5
Microsoft SQL Server 2025 for x64-based Systems (GDR) 17.0	17.0.1050.2 → < 17.0.1135.8	17.0.1135.8

Autres CVE de Microsoft SQL Server 2025 (CU8)

Les 69 CVE de Microsoft SQL Server 2025 (CU8) →

CVE-2026-88088 Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally 7.0 Élevée CVE-2026-88086 Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network 5.3 Moyenne CVE-2026-88085 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally 6.4 Moyenne CVE-2026-85919 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally 7.0 Élevée