CVE-2026-67378: falha crítica em Microsoft SQL Server 2019 (CU 32)
Microsoft SQL Server Remote Code Execution Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9epss 0.7%
Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Produtos afetados
Microsoft · Microsoft SQL Server 2019 (CU 32)Microsoft · Microsoft SQL Server 2019 (GDR)Microsoft · Microsoft SQL Server 2022 (CU 26)Microsoft · Microsoft SQL Server 2022 (GDR)Microsoft · Microsoft SQL Server 2025 (CU8)Microsoft · Microsoft SQL Server 2025 for x64-based Systems (GDR)CVEs relacionadas — Microsoft SQL Server 2019 (CU 32)
No mesmo produto, das mais perigosas para as menos.
CVE-2025-49719HIGHMicrosoft SQL Server Information Disclosure VulnerabilityEPSS 15.5%CVE-2021-1636HIGHMicrosoft SQL Elevation of Privilege VulnerabilityEPSS 6.7%CVE-2025-49718HIGHMicrosoft SQL Server Information Disclosure VulnerabilityEPSS 3.9%CVE-2024-28910HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.8%CVE-2024-29985HIGHMicrosoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.4%CVE-2024-28934HIGHMicrosoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityEPSS 2.4%