← Back

CVE-2026-67376

nvd nist
Published: Sep 8, 2026Modified: Sep 16, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: secure@microsoft.com (Secondary)

Description

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.

Affected (8)

Microsoft
4 products
Sql Server 2017
Sql Server 2019
Sql Server 2022
Sql Server 2025
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Sql Server 2017
version < 14.0.2130.4
Sql Server 2017
14.0.3006.16 ≤ version < 14.0.3550.4
Microsoft
Sql Server 2019
version < 15.0.2190.7
Sql Server 2019
15.0.4003.23 ≤ version < 15.0.4490.9
Microsoft
Sql Server 2022
version < 16.0.1200.5
Sql Server 2022
16.0.4003.1 ≤ version < 16.0.4275.2
Microsoft
Sql Server 2025
version < 17.0.1135.8
Sql Server 2025
17.0.4006.2 ≤ version < 17.0.4085.5

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (1)

Source: secure@microsoft.com
Vendor AdvisoryPatch

Timeline

No history available yet.