EUVD-2026-73190
GHSA-gprc-3mvx-rhh8
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local heap overflow reachable by any low-privileged SQL or OS user with full process-level code execution; no scope change or user interaction needed.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
AnalysisAI
Heap-based buffer overflow in Microsoft SQL Server allows a low-privileged local attacker to execute arbitrary code with full confidentiality, integrity, and availability impact on the SQL Server host. Affected versions span four major release generations - SQL Server 2017 through 2025 - across both Cumulative Update and GDR servicing tracks, indicating a systemic code path defect rather than an isolated regression. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid low-privileged local account on the SQL Server host machine or an authenticated SQL Server login, as established by CVSS PR:L and AV:L. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.8 (High) score with AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H reflects a low-complexity, low-privilege local exploit with complete impact - consistent with a heap overflow reachable by any authenticated user on the SQL Server host. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-released cumulative updates or GDR patches for each affected track: SQL Server 2017 CU31 users should update to 14.0.3550.4 or later; SQL Server 2017 GDR users to 14.0.2130.4 or later; SQL Server 2019 CU32 users to 15.0.4490.9 or later; SQL Server 2019 GDR users to 15.0.2190.7 or later; SQL Server 2022 CU26 users to 16.0.4275.2 or later; SQL Server 2022 GDR users to 16.0.1200.5 or later; SQL Server 2025 CU8 users to 17.0.4085.5 or later; and SQL Server 2025 GDR x64 users to 17.0.1135.8 or later. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify and document all SQL Server 2017, 2019, 2022, and 2025 instances in production and pre-production environments, noting their current servicing level (both CU and GDR tracks are affected). …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Sql Server 2017
View allSQL Server 2016-2025 contains an improper access control flaw that allows authenticated network attackers to escalate pr
Microsoft SQL Server Elevation of Privilege Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is rem
Microsoft SQL Server Elevation of Privilege Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is rem
Heap-based buffer overflow in Microsoft SQL Server 2017 and 2019 enables unauthenticated network attackers to execute ar
SQL injection in Microsoft SQL Server enables a low-privileged authenticated attacker to escalate database privileges ov
Privilege escalation in Microsoft SQL Server 2017 through 2025 allows any low-privileged authenticated database user to
Heap-based buffer overflow in Microsoft SQL Server 2017 through 2025 enables an authenticated low-privilege network atta
Remote code execution is possible in Microsoft SQL Server 2017 through 2025 via a heap-based buffer overflow (CWE-122) t
SQL injection in Microsoft SQL Server (versions 2017 through 2025) enables a network-authenticated low-privilege attacke
Heap-based buffer overflow in Microsoft SQL Server enables an authenticated, low-privileged network attacker to achieve
Heap-based buffer overflow in Microsoft SQL Server (versions 2017 through 2025) enables any authenticated network attack
Remote code execution in Microsoft SQL Server affects versions 2017 through 2025 via an integer overflow that triggers a
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today