CVE-2026-77482high8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Impact
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
Source excerpt · microsoftAffected packages
This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Microsoft · Microsoft SQL Server 2017 (CU 31)
Platforms: x64-based Systems
| Version / range | Source status |
|---|---|
| 14.0.0 to before 14.0.3550.4 | affected |
Microsoft · Microsoft SQL Server 2017 (GDR)
Platforms: x64-based Systems
| Version / range | Source status |
|---|---|
| 14.0.0 to before 14.0.2130.4 | affected |
Microsoft · Microsoft SQL Server 2019 (CU 32)
Platforms: x64-based Systems
| Version / range | Source status |
|---|---|
| 15.0.0.0 to before 15.0.4490.9 | affected |
Microsoft · Microsoft SQL Server 2019 (GDR)
Platforms: x64-based Systems
| Version / range | Source status |
|---|---|
| 15.0.0 to before 15.0.2190.7 | affected |
Original source description
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.