CVE-2026-88085
MediumCVSS 6.4Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. The vulnerability resides in the database component and requires prior access to the system.
Risk Assessment
An attacker with valid credentials could gain higher privileges, potentially leading to takeover of the database server and access to sensitive data.
Recommendation
Apply the available SQL Server security updates as soon as possible and limit the number of accounts with access to the database server.
Other vulnerabilities in SQL Server
See all- CVE-2026-67636Critical
An out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-67378Critical
An untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-65669Critical
Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-54118Critical
A vulnerability in SQL Server allows an unauthorized attacker to execute code over a network through deserialization of untrusted data.
- CVE-2026-54117Critical
A vulnerability in SQL Server allows an unauthorized attacker to execute code over a network through deserialization of untrusted data.
- CVE-2026-96956High
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
- CVE-2026-94520Medium
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network. An attacker could exploit this to disrupt service availability.
- CVE-2026-88089Medium
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. An attacker could exploit this to run arbitrary code in the context of the SQL Server process.
- CVE-2026-88086Medium
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network. An attacker could exploit this to access sensitive data.
- CVE-2026-88084Medium
Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network. Resource exhaustion may render the service unavailable.
Original NVD description (English source)
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS