Veille CVE

Mardi 8 septembre 2026

4 CVE sur 57

  1. CVE-2026-67643 9.8 Critique

    Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR)

    Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

  2. CVE-2026-67636 9.0 Critique

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.

  3. CVE-2026-67631 9.8 Critique

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

  4. CVE-2026-67378 9.0 Critique

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.