Microsoft Sql Server 2025 vulnerabilities

CVE-2026-68777 [MEDIUM] CWE-125 CVE-2026-68777: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67389 [MEDIUM] CWE-125 CVE-2026-67389: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67629 [MEDIUM] CWE-125 CVE-2026-67629: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-68784 [MEDIUM] CWE-125 CVE-2026-68784: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-68778 [MEDIUM] CWE-125 CVE-2026-68778: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-68781 [MEDIUM] CWE-125 CVE-2026-68781: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-68780 [MEDIUM] CWE-125 CVE-2026-68780: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67630 [MEDIUM] CWE-125 CVE-2026-67630: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67645 [MEDIUM] CWE-125 CVE-2026-67645: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67369 [MEDIUM] CWE-125 CVE-2026-67369: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-77485 [HIGH] CWE-416 CVE-2026-77485: Use after free in SQL Server allows an authorized attacker to elevate privileges locally. Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88088 [HIGH] CWE-190 CVE-2026-88088: Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges loc Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.

CVE-2026-85876 [HIGH] CWE-416 CVE-2026-85876: Use after free in SQL Server allows an authorized attacker to elevate privileges locally. Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

CVE-2026-70189 [MEDIUM] CWE-122 CVE-2026-70189: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

CVE-2026-88089 [MEDIUM] CWE-20 CVE-2026-88089: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

CVE-2026-67633 [MEDIUM] CWE-125 CVE-2026-67633: Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network. Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.

CVE-2026-67383 [MEDIUM] CWE-209 CVE-2026-67383: Generation of error message containing sensitive information in SQL Server allows an authorized atta Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-88085 [MEDIUM] CWE-122 CVE-2026-88085: Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88084 [MEDIUM] CWE-770 CVE-2026-88084: Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.

CVE-2026-68785 [MEDIUM] CWE-122 CVE-2026-68785: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.