CVE-2026-116933

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions prior to 16.0.1220.3 Microsoft SQL Server versions prior to 16.0.4315.2

Description A heap-based buffer overflow exists in the database engine, which allows an authorized attacker to execute code remotely over a network. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially leading to memory corruption.

Recommendations Update to version 16.0.1220.3. Update to version 16.0.4315.2.