Sep 2026: Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-77482 Published on September 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
Weakness Type
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
Products Associated with CVE-2026-77482
stack.watch emails you whenever new vulnerabilities are published in Microsoft Sql Server 2017 or Microsoft Sql Server 2019. Just hit a watch button to start following.
Affected Versions
Microsoft SQL Server 2017 (CU 31):- Version 14.0.0 and below 14.0.3550.4 is affected.
- Version 14.0.0 and below 14.0.2130.4 is affected.
- Version 15.0.0.0 and below 15.0.4490.9 is affected.
- Version 15.0.0 and below 15.0.2190.7 is affected.