CVE-2026-88082HighCVSS 7.0

Microsoft SQL Server Elevation of Privilege Vulnerability

Published
October 13, 2026
Last Modified
—

🔗 CVE IDs covered (1)

📋 Description

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

🎯 Affected products7

  • Microsoft SQL Server 2019 for x64-based Systems (CU32)
  • Microsoft SQL Server 2019 for x64-based Systems (GDR)
  • Microsoft SQL Server 2022 for x64-based Systems (CU27)
  • Microsoft SQL Server 2022 for x64-based Systems (GDR)
  • Microsoft SQL Server 2025 for x64-based Systems (CU8)
  • Microsoft SQL Server 2025 for x64-based Systems (CU9)
  • Microsoft SQL Server 2025 for x64-based Systems (GDR)

✅ Remediation

KB5128493 (Security Update) — fixed build 16.0.1210.3 KB5128492 (Security Update) — fixed build 17.0.1145.4 KB5128495 (Security Update) — fixed build 15.0.2200.2 KB5128494 (Security Update) — fixed build 15.0.4500.2 KB5126934 (Security Update) — fixed build 16.0.4305.5 KB5126967 (Security Update) — fixed build 17.0.5015.4

🔗 References (13)