Vulnerability Details CVE-2026-67638
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 50.3%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2026-67638
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.1000.7
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.1050.2
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.1105.2
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.1110.1
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.1115.1
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.1125.2
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.4006.2
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.4020.2
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.4030.1
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.4040.1
-
cpe:2.3:a:microsoft:sql_server_2025:17.0.4060.2