Read the docs
Microsoft update

KB5122771

Security Update

View on Microsoft →

Fixed in

Fixes 52 records

TI-2026-47787 CVE-2026-67643 · GHSA-r6qg-cj8h-f89v

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 45

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 16.0.4275.2, 16.0.1200.5 +2 CWE-122
TI-2026-47780 CVE-2026-67631 · GHSA-9wr9-7c42-p6f9

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 45

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-54019 CVE-2026-77484 · GHSA-9c53-qmh3-jjjf

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 43

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01694 Published 2026-09-08 Fixed in 15.0.4490.9, 15.0.2190.7 +4 CWE-502
TI-2026-54554 CVE-2026-78456 · GHSA-h57r-w39w-33fc

SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 16.0.4275.2, 16.0.1200.5 CWE-122
TI-2026-54016 CVE-2026-77481 · GHSA-x655-787w-f787

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-48364 CVE-2026-68786 · GHSA-cp2c-9r38-r3hx

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-48354 CVE-2026-68775 · GHSA-pqhh-6372-c5r4

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-47784 CVE-2026-67639 · GHSA-8jxv-x8fp-rxf8

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-47782 CVE-2026-67636 · GHSA-9r6v-wqq6-8v3r

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00707 Published 2026-09-08 Fixed in 15.0.4490.9, 15.0.2190.7 +4 CWE-125
TI-2026-47677 CVE-2026-67388 · GHSA-9v73-pr97-vpq7

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-47675 CVE-2026-67385 · GHSA-p7jh-8q9g-vggh

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Use after free in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-416
TI-2026-47674 CVE-2026-67384 · GHSA-6m72-p3fw-wjjv

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-47672 CVE-2026-67381 · GHSA-p386-p34m-xfc6

Microsoft SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-47671 CVE-2026-67380 · GHSA-82pw-m47h-m5xj

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-47669 CVE-2026-67378 · GHSA-4259-xrjq-w65p

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 42

Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00707 Published 2026-09-08 Fixed in 15.0.4490.9, 15.0.2190.7 +4 CWE-822
TI-2026-47666 CVE-2026-67370 · GHSA-9q7c-j2j7-x447

Microsoft SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 42

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00987 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-89
TI-2026-47664 CVE-2026-67368 · GHSA-fm4w-j23h-7p7j

Microsoft SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 42

Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01024 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-59
TI-2026-47454 CVE-2026-66820 · GHSA-wccj-w6f2-7r8j

SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 42

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00987 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-89
TI-2026-47453 CVE-2026-66819 · GHSA-9c22-76g9-f83j

Microsoft SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 42

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00987 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-89
TI-2026-54022 CVE-2026-77487 · GHSA-ch5f-9v66-h8x4

SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 41

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00778 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-284
TI-2026-54018 CVE-2026-77483 · GHSA-pqv8-pg4r-hqpq

SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 41

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00778 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-1390
TI-2026-54015 CVE-2026-77480 · GHSA-f46f-2pjx-2v6r

SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 41

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00778 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-1220
TI-2026-51237 CVE-2026-73028 · GHSA-qq9g-q5hv-pfjw

SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 41

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00778 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-284
TI-2026-47668 CVE-2026-67376 · GHSA-w8gp-wffp-fvg4

Microsoft SQL Server Denial of Service Vulnerability

Priority MEDIUM 41

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-190
TI-2026-47452 CVE-2026-66818 · GHSA-hx68-h5c3-vvjp

Microsoft SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 41

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00778 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-269
TI-2026-47450 CVE-2026-66814 · GHSA-jv4w-r899-fr8h

Microsoft SQL Server Elevation of Privilege Vulnerability

Priority MEDIUM 41

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00778 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-1220
TI-2026-47670 CVE-2026-67379 · GHSA-8833-9p3x-vwf3

Microsoft SQL Server Remote Code Execution Vulnerability

Priority MEDIUM 40

Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00663 Published 2026-09-08 Fixed in 15.0.4490.9, 15.0.2190.7 +4 CWE-121
TI-2026-34874 CVE-2026-47297 · GHSA-rch5-r7w5-8fc5

Microsoft SQL Server Remote Code Execution Vulnerability

Priority LOW 39

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01113 Published 2026-09-08 Fixed in 15.0.4490.9, 15.0.2190.7 +4 CWE-502
TI-2026-48365 CVE-2026-68787 · GHSA-gprc-3mvx-rhh8

Microsoft SQL Server Remote Code Execution Vulnerability

Priority LOW 36

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-54020 CVE-2026-77485 · GHSA-969q-58jf-4f5x

SQL Server Elevation of Privilege Vulnerability

Priority LOW 32

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-416
TI-2026-51238 CVE-2026-73029 · GHSA-rw49-qwx8-9x7q

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 15.0.4490.9, 15.0.2190.7 +4 CWE-126
TI-2026-48362 CVE-2026-68784 · GHSA-qr75-r6v9-c988

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-125
TI-2026-48360 CVE-2026-68781 · GHSA-grcf-vf82-2jm6

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-125
TI-2026-48359 CVE-2026-68780 · GHSA-hm74-wwgx-h5fv

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-125
TI-2026-48358 CVE-2026-68779 · GHSA-33h7-4wjg-mccv

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-125
TI-2026-48357 CVE-2026-68778 · GHSA-q6v8-jpwr-mf9g

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-125
TI-2026-48356 CVE-2026-68777 · GHSA-jrf2-gg6v-r8q9

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-125
TI-2026-48355 CVE-2026-68776 · GHSA-c3vj-j2fx-5vv2

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-908
TI-2026-47789 CVE-2026-67648 · GHSA-9cgp-6vfc-mw5p

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-908
TI-2026-47788 CVE-2026-67645 · GHSA-g97c-mh47-f65v

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-125
TI-2026-47785 CVE-2026-67641 · GHSA-m563-v4rr-6f2j

Microsoft SQL Server Denial of Service Vulnerability

Priority LOW 31

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01138 Published 2026-09-08 Fixed in 16.0.4275.2, 16.0.1200.5 +2 CWE-190
TI-2026-47781 CVE-2026-67633 · GHSA-c5hp-67h3-xjp7

Microsoft SQL Server Denial of Service Vulnerability

Priority LOW 31

Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01138 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-125
TI-2026-47779 CVE-2026-67630 · GHSA-grvj-972r-pp78

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-125
TI-2026-47778 CVE-2026-67629 · GHSA-j9xf-3g7w-wpj6

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-125
TI-2026-47777 CVE-2026-67624 · GHSA-rfjq-fp98-3gw6

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 15.0.4490.9, 15.0.2190.7 +4 CWE-125
TI-2026-47680 CVE-2026-67393 · GHSA-x8c3-f889-qqmj

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-126
TI-2026-47679 CVE-2026-67390 · GHSA-q5hh-5v3v-96hc

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-126
TI-2026-47678 CVE-2026-67389 · GHSA-cq6x-jp2q-fhpf

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 16.0.4275.2, 16.0.1200.5 +2 CWE-125
TI-2026-47676 CVE-2026-67386 · GHSA-438x-m8qh-h4mv

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 31

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-908
TI-2026-47451 CVE-2026-66816 · GHSA-c9p4-3ww6-v9gp

Microsoft SQL Server Security Feature Bypass Vulnerability

Priority LOW 31

Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00995 Published 2026-09-08 Fixed in 16.0.4275.2, 16.0.1200.5 +2 CWE-778
TI-2026-48363 CVE-2026-68785 · GHSA-74rx-r3vg-p4wg

Microsoft SQL Server Remote Code Execution Vulnerability

Priority LOW 27

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01124 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-122
TI-2026-54023 CVE-2026-77488 · GHSA-2p2q-6jp7-fc7g

Microsoft SQL Server Information Disclosure Vulnerability

Priority LOW 25

Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00404 Published 2026-09-08 Fixed in 14.0.3550.4, 14.0.2130.4 +6 CWE-191