这段描述的是 SQL Server 中一个经典的安全漏洞。在信息安全领域,“Stack-based buffer overflow”通常译为“基于栈的缓冲区溢出”;“authorized attacker”指拥有访问权限的攻击者(即认证用户),区别于未认证攻击者;“execute code over a network”指通过网络执行任意代码,这通常意味着攻击者可以在远程目标服务器上运行命令。 综合来看,这段描述对应的标准译法为: SQL Server 中的基于栈的缓冲区溢出漏洞,允许经过认证的攻击者通过网络执行代
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Microsoft | Microsoft SQL Server 2019 (CU 32) | 15.0.0.0< 15.0.4490.9 |
affected |
| Microsoft | Microsoft SQL Server 2019 (GDR) | 15.0.0< 15.0.2190.7 |
affected |
| Microsoft | Microsoft SQL Server 2022 (CU 26) | 16.0.0.0< 16.0.4275.2 |
affected |
| Microsoft | Microsoft SQL Server 2022 (GDR) | 16.0.0< 16.0.1200.5 |
affected |
| Microsoft | Microsoft SQL Server 2025 (CU8) | 17.0.0.0< 17.0.4085.5 |
affected |
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) | 17.0.1050.2< 17.0.1135.8 |
affected |
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microsoft | Microsoft SQL Server 2019 (CU 32) | 15.0.0.0 ~ 15.0.4490.9 | - |
|
| Microsoft | Microsoft SQL Server 2019 (GDR) | 15.0.0 ~ 15.0.2190.7 | - |
|
| Microsoft | Microsoft SQL Server 2022 (CU 26) | 16.0.0.0 ~ 16.0.4275.2 | - |
|
| Microsoft | Microsoft SQL Server 2022 (GDR) | 16.0.0 ~ 16.0.1200.5 | - |
|
| Microsoft | Microsoft SQL Server 2025 (CU8) | 17.0.0.0 ~ 17.0.4085.5 | - |
|
| Microsoft | Microsoft SQL Server 2025 for x64-based Systems (GDR) | 17.0.1050.2 ~ 17.0.1135.8 | - |
|
| # | POC Description | Source Link | Shenlong Link |
|---|
No public POC found.
Login to generate AI POC| CVE-2026-83941 | 9.9 CRITICAL | Entra ID Elevation of Privilege Vulnerability |
| CVE-2026-72979 | 9.8 CRITICAL | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-69819 | 9.8 CRITICAL | RPC Runtime Library Remote Code Execution Vulnerability |
| CVE-2026-73025 | 9.8 CRITICAL | Windows iSCSI Security Feature Bypass Vulnerability |
| CVE-2026-69276 | 9.8 CRITICAL | Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability |
| CVE-2026-73010 | 9.8 CRITICAL | Microsoft Failover Cluster Remote Code Execution Vulnerability |
| CVE-2026-72982 | 9.8 CRITICAL | Windows Netlogon Remote Code Execution Vulnerability |
| CVE-2026-69595 | 9.8 CRITICAL | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability |
| CVE-2026-73009 | 9.8 CRITICAL | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
| CVE-2026-72983 | 9.8 CRITICAL | Internet Connection Sharing (ICS) Remote Code Execution Vulnerability |
| CVE-2026-69525 | 9.8 CRITICAL | Remote Desktop Services Remote Code Execution Vulnerability |
| CVE-2026-69491 | 9.8 CRITICAL | Microsoft DirectMusic Remote Code Execution Vulnerability |
| CVE-2026-69910 | 9.8 CRITICAL | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2026-69730 | 9.8 CRITICAL | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2026-69463 | 9.8 CRITICAL | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-78509 | 9.8 CRITICAL | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-78510 | 9.8 CRITICAL | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2026-69590 | 9.8 CRITICAL | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2026-69496 | 9.8 CRITICAL | Windows Compressed Folder Remote Code Execution Vulnerability |
| CVE-2026-69408 | 9.8 CRITICAL | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
Showing top 20 of 966 CVEs. View all on vendor page → →
No comments yet