PT-2026-144101

CVE-2026-67372

Published

2026-11-10

Updated

2026-11-10

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions prior to 17.0.5045.3

Description A heap-based buffer overflow allows an authorized attacker to execute code over a network. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially leading to memory corruption.

Recommendations Update to version 17.0.5045.3.

Exploitability

Fix

Impacts

Researchers

Dawnflare0Ccbbf129444Eb66344Ccafb92B00Df4Pwnky

Le Tran Hai Tung

Tacbliw

Vendors

Affected products

Weakness enumeration

CWE-122: Heap-based Buffer Overflow