CVE-2026-70189medium6.7
Microsoft SQL Server Remote Code Execution Vulnerability
Impact
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
Source excerpt · microsoftAffected packages
This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Microsoft · Microsoft SQL Server 2017 (GDR)
Platforms: x64-based Systems
| Version / range | Source status |
|---|---|
| 14.0.0 to before 14.0.2140.2 | affected |
Microsoft · Microsoft SQL Server 2017 for x64-based Systems (CU31)
Platforms: x64-based Systems
| Version / range | Source status |
|---|---|
| 14.0.3006.16 to before 14.0.3560.2 | affected |
Microsoft · Microsoft SQL Server 2019 (GDR)
Platforms: x64-based Systems
| Version / range | Source status |
|---|---|
| 15.0.0 to before 15.0.2200.2 | affected |
Microsoft · Microsoft SQL Server 2019 for x64-based Systems (CU32)
Platforms: x64-based Systems
| Version / range | Source status |
|---|---|
| 15.0.4003.23 to before 15.0.4500.2 | affected |
Microsoft · Microsoft SQL Server 2022 (GDR)
Platforms: x64-based Systems
| Version / range | Source status |
|---|---|
| 16.0.0 to before 16.0.1210.3 | affected |
Microsoft · Microsoft SQL Server 2022 for x64-based Systems (CU27)
Platforms: x64-based Systems
| Version / range | Source status |
|---|---|
| 16.0.4003.1 to before 16.0.4305.5 | affected |
Microsoft · Microsoft SQL Server 2025 (CU8)
Platforms: x64-based Systems
| Version / range | Source status |
|---|---|
| - | affected |
Microsoft · Microsoft SQL Server 2025 for x64-based Systems (CU9)
Platforms: x64-based Systems
| Version / range | Source status |
|---|---|
| 17.0.4006.2 to before 17.0.5015.4 | affected |
Microsoft · Microsoft SQL Server 2025 for x64-based Systems (GDR)
Platforms: x64-based Systems
| Version / range | Source status |
|---|---|
| 17.0.1050.2 to before 17.0.1145.4 | affected |
Original source description
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.