CVE-2026-67642

Description

References

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67642 · Vendor Advisory

More vulnerabilities in sql server 2025

• CVE-2026-77488MEDIUM 5.5Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.
• CVE-2026-77487HIGH 8.8Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
• CVE-2026-77485HIGH 7.0Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
• CVE-2026-77484HIGH 8.8Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
• CVE-2026-77483HIGH 8.8Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.