Heap-based Buffer Overflow in Microsoft SQL Server
CVE-2026-83945

6.6MEDIUM

Key Information:

Vendor: Microsoft
Status: Microsoft Sql Server 2022 (gdr); Microsoft Sql Server 2022 For X64-based Systems (cu27); Microsoft Sql Server 2025 (cu8); Microsoft Sql Server 2025 For X64-based Systems (cu9)
Vendor: CVE Published:; 13 October 2026

What is CVE-2026-83945?

A heap-based buffer overflow vulnerability in Microsoft SQL Server can be exploited by an authorized attacker to execute arbitrary code remotely across a network. This flaw arises from improper handling of objects in memory, enabling attackers to manipulate the SQL Server process. Proper security measures and timely updates are essential to mitigate the risks associated with this vulnerability.

Affected Version(s)

Microsoft SQL Server 2022 (GDR) x64-based Systems 16.0.0 < 16.0.1210.3

Microsoft SQL Server 2022 for x64-based Systems (CU27) x64-based Systems 16.0.4003.1 < 16.0.4305.5

Microsoft SQL Server 2025 (CU8) x64-based Systems -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...

vendor-advisorypatch

CVSS V3.1

Score:

6.6

Severity:

MEDIUM

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

High

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 13, 2026
Vulnerability Reserved
Aug 31, 2026

CVE-2026-83945 Data

JSON