Stack-based buffer overflow in Microsoft SQL Server - CVE-2026-67375
Published: November 11, 2026
Vulnerability identifier: #VU165512
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-67375
CWE-ID: CWE-121
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to escalate privileges to SQL sysadmin or SYSTEM privileges.
The vulnerability exists due to a stack-based buffer overflow in Microsoft SQL Server when handling operations from logged-in users. A remote user can log in to the SQL server with explicit permissions and exploit the overflow to gain SQL sysadmin or SYSTEM privileges.
Affected software
Microsoft SQL Server
How to mitigate CVE-2026-67375
Install security update from vendor's website.
Microsoft SQL Server - update to 17.0.1155.3