NetSight
medium6.5

CVE-2026-68779

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Impact

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Affected products

VendorProductAffected versions
MicrosoftSql Server 2017
before 14.0.2130.4
from 14.0.3006.16 before 14.0.3550.4
MicrosoftSql Server 2019
before 15.0.2190.7
from 15.0.4003.23 before 15.0.4490.9
MicrosoftSql Server 2022
before 16.0.1200.5
from 16.0.4003.1 before 16.0.4275.2
MicrosoftSql Server 2025
before 17.0.1135.8
from 17.0.4006.2 before 17.0.4085.5

Weakness classification

References