CVE-2026-116933

Vendor

Microsoft

Product

Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU27), Microsoft SQL Server 2025 CU10, Microsoft SQL Server 2025 for x64-based Systems (CU9)

CVSS v3.1

7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-122

Exposure class

Database

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 39
   CVE NVD 3h ago

   Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

   Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

   CVSS 7.2 CVE-2026-116933 Microsoft