CVE-2026-67628HighCVSS 4.9
Microsoft SQL Server Information Disclosure Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
🎯 Affected products8
- Microsoft SQL Server 2017 for x64-based Systems (CU31)
- Microsoft SQL Server 2017 for x64-based Systems (GDR)
- Microsoft SQL Server 2019 for x64-based Systems (CU32)
- Microsoft SQL Server 2019 for x64-based Systems (GDR)
- Microsoft SQL Server 2022 for x64-based Systems (CU27)
- Microsoft SQL Server 2022 for x64-based Systems (GDR)
- Microsoft SQL Server 2025 for x64-based Systems (CU9)
- Microsoft SQL Server 2025 for x64-based Systems (GDR)
✅ Remediation
KB5128497 (Security Update) — fixed build 14.0.2140.2 KB5128495 (Security Update) — fixed build 15.0.2200.2 KB5128493 (Security Update) — fixed build 16.0.1210.3 KB5128492 (Security Update) — fixed build 17.0.1145.4 KB5128496 (Security Update) — fixed build 14.0.3560.2 KB5128494 (Security Update) — fixed build 15.0.4500.2 KB5126934 (Security Update) — fixed build 16.0.4305.5 KB5126967 (Security Update) — fixed build 17.0.5015.4
🔗 References (17)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67628
- patchhttps://www.microsoft.com/download/details.aspx?familyid=25e555b8-beb6-43b5-ada2-1fa002e95f1b
- referencehttps://support.microsoft.com/help/5128497
- patchhttps://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1
- referencehttps://support.microsoft.com/help/5128495
- patchhttps://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296
- referencehttps://support.microsoft.com/help/5128493
- patchhttps://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb
- referencehttps://support.microsoft.com/help/5128492
- patchhttps://www.microsoft.com/download/details.aspx?familyid=b6413b5c-ab8e-4bd7-9793-72f5e805e83b
- referencehttps://support.microsoft.com/help/5128496
- patchhttps://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d
- referencehttps://support.microsoft.com/help/5128494
- patchhttps://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a
- referencehttps://support.microsoft.com/help/5126934
- patchhttps://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252
- referencehttps://support.microsoft.com/help/5126967