Showing the most recent saved intelligence. One or more sources are awaiting a successful refresh; source dates are listed below.
CVE-2026-67384 Microsoft
Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.
CVSS 8.8
Update availability Security update available Affected: Microsoft SQL Server 2017 for x64-based Systems (CU 31) · Microsoft SQL Server 2017 for x64-based Systems (GDR) · +6 more
Updated September 8, 2026
CVE-2026-67385 Microsoft
Use after free in SQL Server allows an authorized attacker to execute code over a network.
CVSS 8.8
Update availability Security update available Affected: Microsoft SQL Server 2017 for x64-based Systems (CU 31) · Microsoft SQL Server 2017 for x64-based Systems (GDR) · +6 more
Updated September 8, 2026
CVE-2026-67386 Microsoft
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft SQL Server 2017 for x64-based Systems (CU 31) · Microsoft SQL Server 2017 for x64-based Systems (GDR) · +6 more
Updated September 8, 2026
CVE-2026-67388 Microsoft
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVSS 8.8
Update availability Security update available Affected: Microsoft SQL Server 2017 for x64-based Systems (CU 31) · Microsoft SQL Server 2017 for x64-based Systems (GDR) · +6 more
Updated September 8, 2026
CVE-2026-67389 Microsoft
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft SQL Server 2022 for x64-based Systems (CU 26) · Microsoft SQL Server 2022 for x64-based Systems (GDR) · +2 more
Updated September 8, 2026
CVE-2026-67390 Microsoft
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft SQL Server 2017 for x64-based Systems (CU 31) · Microsoft SQL Server 2017 for x64-based Systems (GDR) · +6 more
Updated September 8, 2026
CVE-2026-67393 Microsoft
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft SQL Server 2017 for x64-based Systems (CU 31) · Microsoft SQL Server 2017 for x64-based Systems (GDR) · +6 more
Updated September 8, 2026
CVE-2026-67624 Microsoft
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft SQL Server 2019 for x64-based Systems (CU 32) · Microsoft SQL Server 2019 for x64-based Systems (GDR) · +4 more
Updated September 8, 2026
CVE-2026-67629 Microsoft
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft SQL Server 2017 for x64-based Systems (CU 31) · Microsoft SQL Server 2017 for x64-based Systems (GDR) · +6 more
Updated September 8, 2026
CVE-2026-67630 Microsoft
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft SQL Server 2017 for x64-based Systems (CU 31) · Microsoft SQL Server 2017 for x64-based Systems (GDR) · +6 more
Updated September 8, 2026
CVE-2026-67633 Microsoft
Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft SQL Server 2017 for x64-based Systems (CU 31) · Microsoft SQL Server 2017 for x64-based Systems (GDR) · +6 more
Updated September 8, 2026
CVE-2026-67638 Microsoft
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVSS 8.8
Update availability Security update available Affected: Microsoft SQL Server 2025 for x64-based Systems (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR)
Updated September 8, 2026
CVE-2026-67639 Microsoft
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVSS 8.8
Update availability Security update available Affected: Microsoft SQL Server 2017 for x64-based Systems (CU 31) · Microsoft SQL Server 2017 for x64-based Systems (GDR) · +6 more
Updated September 8, 2026
CVE-2026-67641 Microsoft
Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft SQL Server 2022 for x64-based Systems (CU 26) · Microsoft SQL Server 2022 for x64-based Systems (GDR) · +2 more
Updated September 8, 2026
CVE-2026-67642 Microsoft
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVSS 8.8
Update availability Security update available Affected: Microsoft SQL Server 2025 for x64-based Systems (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR)
Updated September 8, 2026
CVE-2026-67645 Microsoft
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft SQL Server 2017 for x64-based Systems (CU 31) · Microsoft SQL Server 2017 for x64-based Systems (GDR) · +6 more
Updated September 8, 2026
CVE-2026-67648 Microsoft
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft SQL Server 2017 for x64-based Systems (CU 31) · Microsoft SQL Server 2017 for x64-based Systems (GDR) · +6 more
Updated September 8, 2026
CVE-2026-68775 Microsoft
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVSS 8.8
Update availability Security update available Affected: Microsoft SQL Server 2017 for x64-based Systems (CU 31) · Microsoft SQL Server 2017 for x64-based Systems (GDR) · +6 more
Updated September 8, 2026
CVE-2026-68776 Microsoft
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft SQL Server 2017 for x64-based Systems (CU 31) · Microsoft SQL Server 2017 for x64-based Systems (GDR) · +6 more
Updated September 8, 2026
CVE-2026-68777 Microsoft
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft SQL Server 2017 for x64-based Systems (CU 31) · Microsoft SQL Server 2017 for x64-based Systems (GDR) · +6 more
Updated September 8, 2026
CVE-2026-68778 Microsoft
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft SQL Server 2017 for x64-based Systems (CU 31) · Microsoft SQL Server 2017 for x64-based Systems (GDR) · +6 more
Updated September 8, 2026
CVE-2026-68779 Microsoft
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft SQL Server 2017 for x64-based Systems (CU 31) · Microsoft SQL Server 2017 for x64-based Systems (GDR) · +6 more
Updated September 8, 2026
CVE-2026-68780 Microsoft
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft SQL Server 2017 for x64-based Systems (CU 31) · Microsoft SQL Server 2017 for x64-based Systems (GDR) · +6 more
Updated September 8, 2026
CVE-2026-68781 Microsoft
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft SQL Server 2017 for x64-based Systems (CU 31) · Microsoft SQL Server 2017 for x64-based Systems (GDR) · +6 more
Updated September 8, 2026