CVE-2026-67379: Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft SQL Server Remote Code Execution Vulnerability
Other sources
Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
— Microsoft
Affected Software
Remediation
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker must be authorized to access the affected SQL Server instance and able to reach it over the network. The issue does not require user interaction, but exploitation has high attack complexity.
What is the potential impact if exploitation succeeds?
A successful attacker can execute code on the affected SQL Server. The supplied severity vector indicates potential high impact to confidentiality, integrity, and availability, including impact beyond the vulnerable security authority.
Which SQL Server releases are identified as affected?
The affected software list includes Microsoft SQL Server 2019, SQL Server 2019 CU 32, SQL Server 2022, SQL Server 2022 CU 26, SQL Server 2025, and SQL Server 2025 CU8.
How can I determine whether my environment is exposed?
Identify SQL Server instances running one of the listed SQL Server 2019, 2022, or 2025 releases, and determine whether authorized users can connect to those instances over the network. The provided data does not include a detection method, affected build range, or workaround.