CVE-2026-83945HighCVSS 6.6

Microsoft SQL Server Remote Code Execution Vulnerability

Published
October 13, 2026
Last Modified
—

🔗 CVE IDs covered (1)

📋 Description

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

🎯 Affected products5

  • Microsoft SQL Server 2022 for x64-based Systems (CU27)
  • Microsoft SQL Server 2022 for x64-based Systems (GDR)
  • Microsoft SQL Server 2025 for x64-based Systems (CU8)
  • Microsoft SQL Server 2025 for x64-based Systems (CU9)
  • Microsoft SQL Server 2025 for x64-based Systems (GDR)

✅ Remediation

KB5128492 (Security Update) — fixed build 17.0.1145.4 KB5128493 (Security Update) — fixed build 16.0.1210.3 KB5126934 (Security Update) — fixed build 16.0.4305.5 KB5126967 (Security Update) — fixed build 17.0.5015.4

🔗 References (9)