Windows OLE DB Remote Code Execution Vulnerability
CVE-2026-78442
8.8HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 8 September 2026
What is CVE-2026-78442?
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.
Affected Version(s)
Microsoft SQL Server 2017 (CU 31) x64-based Systems 14.0.0 < 14.0.3550.4
Microsoft SQL Server 2017 (GDR) x64-based Systems 14.0.0 < 14.0.2130.4
Microsoft SQL Server 2019 (CU 32) x64-based Systems 15.0.0.0 < 15.0.4490.9