Stack-based Buffer Overflow in Microsoft SQL Server
CVE-2026-88083

7.5HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Sql Server 2022 (cu 26)
Microsoft Sql Server 2022 (gdr)
Microsoft Sql Server 2022 For X64-based Systems (cu27)
Microsoft Sql Server 2025 (cu8)
Vendor
CVE Published:
13 October 2026

What is CVE-2026-88083?

A stack-based buffer overflow vulnerability in Microsoft SQL Server enables unauthorized attackers to execute arbitrary code remotely. This flaw can be exploited over a network, potentially leading to severe security breaches. Organizations using affected versions of SQL Server must prioritize applying patches to mitigate risks and protect sensitive data.

Affected Version(s)

Microsoft SQL Server 2022 (CU 26) x64-based Systems -

Microsoft SQL Server 2022 (GDR) x64-based Systems 16.0.0 < 16.0.1210.3

Microsoft SQL Server 2022 for x64-based Systems (CU27) x64-based Systems 16.0.4003.1 < 16.0.4305.5

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.