PT-2026-87226 · Microsoft · Sql Server+2
CVE-2026-67373
·
Published
2026-09-08
·
Updated
2026-09-09
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
🚨 SQL Server 2025 admins: patch CVE-2026-67373 now. An authenticated attacker can turn a crafted query into remote code execution—because apparently databases needed an “execute anything” feature.
https://t.co/1vG0qS5kO6
#MicrosoftSecurity #Msrc #Cve202667373 https://t.co/EYU7o7cD4n
Fix
RCE
Heap Based Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sql Server
Sql Server 2025
Sql Server 2025 For X64-Based Systems