CVE-2026-78456

HIGH · 8.8 EPSS 0.9%

No AI summary yet — the auto-summarizer runs every 10 minutes for top trending CVEs.

Description

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVSS 3.1 breakdown

Exploitability 2.8 · Impact 5.9

vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: Low
Privileges required: Low
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

Affected versions

microsoft/sql_server_2022
- < 16.0.1200.5
- 16.0.4003.1 – < 16.0.4275.2

Weaknesses

CWE-122

Vendors

microsoft

Products

sql_server_2022