CVE-2026-88083HighCVSS 7.5
Microsoft SQL Server Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
🎯 Affected products6
- Microsoft SQL Server 2022 for x64-based Systems (CU 26)
- Microsoft SQL Server 2022 for x64-based Systems (CU27)
- Microsoft SQL Server 2022 for x64-based Systems (GDR)
- Microsoft SQL Server 2025 for x64-based Systems (CU8)
- Microsoft SQL Server 2025 for x64-based Systems (CU9)
- Microsoft SQL Server 2025 for x64-based Systems (GDR)
✅ Remediation
KB5128493 (Security Update) — fixed build 16.0.1210.3 KB5128492 (Security Update) — fixed build 17.0.1145.4 KB5126934 (Security Update) — fixed build 16.0.4305.5 KB5126967 (Security Update) — fixed build 17.0.5015.4
🔗 References (9)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88083
- patchhttps://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296
- referencehttps://support.microsoft.com/help/5128493
- patchhttps://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb
- referencehttps://support.microsoft.com/help/5128492
- patchhttps://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a
- referencehttps://support.microsoft.com/help/5126934
- patchhttps://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252
- referencehttps://support.microsoft.com/help/5126967