Veille CVE

Mardi 13 octobre 2026

20 CVE

Critique 0 Élevée 13 Moyenne 7 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft sql server 2019 » ✕
  1. CVE-2026-96956 8.0 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

  2. CVE-2026-94520 4.9 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

  3. CVE-2026-94512 8.8 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  4. CVE-2026-88089 6.7 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

  5. CVE-2026-88088 7.0 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.

  6. CVE-2026-88086 5.3 Moyenne

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.

  7. CVE-2026-88085 6.4 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

  8. CVE-2026-88084 5.3 Moyenne

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2025 (CU8)

    Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.

  9. CVE-2026-88082 7.0 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

  10. CVE-2026-88081 7.7 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  11. CVE-2026-85919 7.0 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

  12. CVE-2026-85888 7.7 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  13. CVE-2026-85886 8.5 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  14. CVE-2026-85876 7.0 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

  15. CVE-2026-70189 6.7 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

  16. CVE-2026-68883 8.5 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

  17. CVE-2026-67628 4.9 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  18. CVE-2026-67625 8.5 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  19. CVE-2026-65674 8.8 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

  20. CVE-2026-69867 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.