CVE-2026-88083
7.5HighPublished 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
- Impact
- Full C/I/A compromise
- Weakness
- CWE-121
Impact
An unauthorized attacker can execute arbitrary code over the network if they trick a user into triggering the flaw. They require network access to the SQL Server and user interaction.
Root cause
A stack-based buffer overflow mishandles input data within SQL Server.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Fix & remediation
Apply the official security update referenced in the Microsoft Security Response Center advisory. If patching must wait, restrict network access to SQL Server ports (such as TCP 1433) to trusted hosts only.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.