EUVD-2026-73795
GHSA-gvh2-qc62-c423
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Network-reachable heap overflow requires user to initiate OLE DB connection (UI:R, PR:N); full CIA impact on exploitation with no scope change.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.
AnalysisAI
Heap-based buffer overflow in the Windows OLE DB component of Microsoft SQL Server 2017 and 2019 enables a network-adjacent unauthenticated attacker to achieve remote code execution when a user interacts with a malicious OLE DB data source. The vulnerability (CWE-122, CVSS 8.8) affects multiple servicing branches across both SQL Server versions, covering both Cumulative Update and General Distribution Release tracks. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The CVSS UI:R metric confirms that exploitation requires a user to actively initiate a connection to a malicious OLE DB data source - for example, opening a crafted .udl (data-link) file, following a poisoned connection string embedded in a document or application, or having a client application configured to contact an attacker-controlled endpoint. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H positions this as high severity: the attack traverses the network with no authentication and low complexity, but requires one user-interaction step - likely a client application connecting to an attacker-controlled OLE DB endpoint or opening a crafted data-link file. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply vendor-released patches from the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78442. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: identify all SQL Server 2017 and 2019 instances in your environment and document systems where users access external OLE DB data sources. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today