high7.0
CVE-2026-88088
Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.
Impact
Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Microsoft SQL Server 2025 For X64-Based Systems (GDR) | from 17.0.1050.2 before 17.0.1145.4 |
| Microsoft | Microsoft SQL Server 2019 (GDR) | from 15.0.0 before 15.0.2200.2 |
| Microsoft | Microsoft SQL Server 2019 For X64-Based Systems (CU32) | from 15.0.4003.23 before 15.0.4500.2 |
| Microsoft | Microsoft SQL Server 2022 For X64-Based Systems (CU27) | from 16.0.4003.1 before 16.0.4305.5 |
| Microsoft | Microsoft SQL Server 2022 (GDR) | from 16.0.0 before 16.0.1210.3 |
| Microsoft | Microsoft SQL Server 2025 For X64-Based Systems (CU9) | from 17.0.4006.2 before 17.0.5015.4 |