CVE-2026-67387

Vendor

Microsoft

Product

Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU31), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU32)

CVSS v3.1

8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-822

Exposure class

Database

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 42
   CVE NVD 4h ago

   Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.

   Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.

   CVSS 8.8 CVE-2026-67387 Microsoft
2. 34
   Advisory MSRC 7h ago

   Microsoft SQL Server Elevation of Privilege Vulnerability

   Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.

   CVE-2026-67387 Microsoft