| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| CVE-2026-67378 | Microsoft SQL Server Remote Code Execution Vulnerability | Microsoft SQL Server | Critical | 15-10-2026 |
Technical Information
An unauthenticated attacker could exploit an untrusted pointer dereference vulnerability in Microsoft SQL Server over a network under specific conditions, achieving remote code execution on the server.
Patch release date: Sep 08, 2026
Further information on this vulnerability is available at : CVE-2026-67378
Affected Software
Microsoft SQL Server 2019 for x64-based Systems (GDR),Microsoft SQL Server 2022 for x64-based Systems (GDR),
Microsoft SQL Server 2025 for x64-based Systems (GDR),
Microsoft SQL Server 2019 for x64-based Systems (CU 32),
Microsoft SQL Server 2025 for x64-based Systems (CU8),
Microsoft SQL Server 2022 for x64-based Systems (CU 26)