Skip to content

CVE record · 2 sources

CVE-2026-42990

CVSS 9.8

Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.

Vendor: Microsoft
Product: SQL Server
CVSS: 9.8
Exposure class: Database

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

35

CVE NVD 14 Jul 2026

Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.

CVSS 9.8 CVE-2026-42990 Microsoft
19

Advisory MSRC 14 Jul 2026

CVE-2026-42990 SQL Server ODBC driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.

CVE-2026-42990 Microsoft