CVE-2026-94520

Description

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

Traduire en français

Produits concernés

• Microsoft SQL Server 2017 (GDR)
• Microsoft SQL Server 2017 for x64-based Systems (CU31)
• Microsoft SQL Server 2019 (GDR)
• Microsoft SQL Server 2019 for x64-based Systems (CU32)
• Microsoft SQL Server 2022 (GDR)
• Microsoft SQL Server 2022 for x64-based Systems (CU27)
• Microsoft SQL Server 2025 for x64-based Systems (CU9)
• Microsoft SQL Server 2025 for x64-based Systems (GDR)

Scores CVSS

Faiblesses (CWE)

• CWE-134

Références

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94520

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories