Nov 2026: Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-116936 Published on November 10, 2026

Microsoft SQL Server Remote Code Execution Vulnerability
Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:
NONE
Automatable:
NO
Technical Impact:
TOTAL

Weakness Type

What is a Stack Overflow Vulnerability?

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

CVE-2026-116936 has been classified to as a Stack Overflow vulnerability or weakness.


Products Associated with CVE-2026-116936

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Affected Versions

Microsoft SQL Server 2017 (GDR): Microsoft SQL Server 2017 for x64-based Systems (CU31): Microsoft SQL Server 2019 (GDR): Microsoft SQL Server 2019 for x64-based Systems (CU32): Microsoft SQL Server 2022 (GDR): Microsoft SQL Server 2022 for x64-based Systems (CU27): Microsoft SQL Server 2025 CU10: Microsoft SQL Server 2025 for x64-based Systems (GDR):