SB2026101484 - Multiple vulnerabilities in Microsoft SQL Server

Description

This security bulletin contains information about 2 vulnerabilities.

1) Heap-based buffer overflow (CVE-ID: CVE-2026-94512)

CWE-ID: CWE-122 - Heap-based Buffer Overflow

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote user to execute arbitrary code on the server.

The vulnerability exists due to a heap-based buffer overflow in SQL Server when processing network requests. A remote user can send a specially crafted request to execute arbitrary code on the server.

User interaction is not required.

2) Stack-based buffer overflow (CVE-ID: CVE-2026-96956)

CWE-ID: CWE-121 - Stack-based buffer overflow

CVSSv4: 7.5 [CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote privileged user to escalate privileges to SYSTEM.

The vulnerability exists due to a stack-based buffer overflow in SQL Server when its components are manipulated to trigger a specific condition. A remote privileged user can manipulate system components over a network to escalate privileges to SYSTEM.

Successful exploitation requires a deep understanding of the system and is not guaranteed. Success may depend on the environment, system configuration, and the presence of additional security measures.

Remediation

Install update from vendor's website.

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-94512
• https://support.microsoft.com/help/5126934
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-96956
• https://support.microsoft.com/help/5126967