CVE-2026-67631 (CRITICAL 9.8) · Watchpost

← All vulnerabilities

CVE-2026-67631

CRITICAL 9.8CVE-2026-67631 · Published 08/09/2026 · updated 17/09/2026

Package	Affected versions	Patched versions
sql server 2017 microsoft	`≥ 14.0.3006.16, < 14.0.3550.4< 14.0.2130.4`	`14.0.3550.414.0.2130.4`
sql server 2019 microsoft	`≥ 15.0.4003.23, < 15.0.4490.9< 15.0.2190.7`	`15.0.4490.915.0.2190.7`
sql server 2022 microsoft	`≥ 16.0.4003.1, < 16.0.4275.2< 16.0.1200.5`	`16.0.4275.216.0.1200.5`
sql server 2025 microsoft	`≥ 17.0.4006.2, < 17.0.4085.5< 17.0.1135.8`	`17.0.4085.517.0.1135.8`

Description

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67631 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free