Skip to content

CVE record · 1 source

CVE-2026-118104

CVSS 6.5

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

Vendor: Microsoft
Product: Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU31), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU32)
CVSS v3.1: 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-908
Exposure class: Database

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

29

CVE NVD 3h ago

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 6.5 CVE-2026-118104 Microsoft