CVE-2026-65669

Vendor

Microsoft

Product

SQL Server

CVSS

9.6

EPSS

0.039 (p90)

Exposure class

Database

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 64
   Research ZDI 8 Sep 2026

   The September 2026 Security Update Review

   Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there’s a phrase from my military days that comes to mind: embrace the suck. Take an…

   Exploited CVSS 10.0 Fix available CVE-2026-75650CVE-2026-81963CVE-2026-85880+57 more Microsoft Adobe
2. 29
   CVE NVD 8 Sep 2026

   Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to…

   Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.

   CVSS 9.6 CVE-2026-65669 Microsoft