Elevation of Privileges in Microsoft SQL Server by Microsoft
CVE-2026-88088

7HIGH

Key Information:

Vendor: Microsoft
Status: Microsoft Sql Server 2019 (gdr); Microsoft Sql Server 2019 For X64-based Systems (cu32); Microsoft Sql Server 2022 (gdr); Microsoft Sql Server 2022 For X64-based Systems (cu27)
Vendor: CVE Published:; 13 October 2026

What is CVE-2026-88088?

An integer overflow vulnerability in Microsoft SQL Server may allow an authorized attacker to gain elevated privileges on the local system. This flaw could enable the attacker to perform unauthorized actions or access sensitive data, compromising system confidentiality and integrity. Immediate patching is recommended to mitigate the risks associated with this vulnerability.

Affected Version(s)

Microsoft SQL Server 2019 (GDR) x64-based Systems 15.0.0 < 15.0.2200.2

Microsoft SQL Server 2019 for x64-based Systems (CU32) x64-based Systems 15.0.4003.23 < 15.0.4500.2

Microsoft SQL Server 2022 (GDR) x64-based Systems 16.0.0 < 16.0.1210.3

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...

vendor-advisorypatch

CVSS V3.1

Score:

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

High

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 13, 2026
Vulnerability Reserved
Sep 9, 2026

CVE-2026-88088 Data

JSON