Microsoft Microsoft SQL Server 2022 (Cu 26)
52 CVEs affecting Microsoft Microsoft SQL Server 2022 (Cu 26). Latest disclosed: 2026-09-08. Critical: 0, High: 30.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-78456 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-77487 | High | 8.8 | 2026-09-08 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-77484 | High | 8.8 | 2026-09-08 | Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-77483 | High | 8.8 | 2026-09-08 | Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-77481 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-77480 | High | 8.8 | 2026-09-08 | Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-73028 | High | 8.8 | 2026-09-08 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-68786 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-68775 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67643 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67639 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67631 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67388 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67385 | High | 8.8 | 2026-09-08 | Use after free in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67384 | High | 8.8 | 2026-09-08 | Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67381 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-67380 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67370 | High | 8.8 | 2026-09-08 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a n… |
CVE-2026-67368 | High | 8.8 | 2026-09-08 | Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-66820 | High | 8.8 | 2026-09-08 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a n… |