CVE-2026-67626medium6.5
Microsoft SQL Server Denial of Service Vulnerability
Impact
Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.
Source excerpt · microsoftAffected packages
This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Microsoft · Microsoft SQL Server 2022 (GDR)
Platforms: x64-based Systems
| Version / range | Source status |
|---|---|
| 16.0.0 to before 16.0.1210.3 | affected |
Microsoft · Microsoft SQL Server 2022 for x64-based Systems (CU27)
Platforms: x64-based Systems
| Version / range | Source status |
|---|---|
| 16.0.4003.1 to before 16.0.4305.5 | affected |
Microsoft · Microsoft SQL Server 2025 for x64-based Systems (CU9)
Platforms: x64-based Systems
| Version / range | Source status |
|---|---|
| 17.0.4006.2 to before 17.0.5015.4 | affected |
Microsoft · Microsoft SQL Server 2025 for x64-based Systems (GDR)
Platforms: x64-based Systems
| Version / range | Source status |
|---|---|
| 17.0.1050.2 to before 17.0.1145.4 | affected |
Original source description
Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.