CVE-2026-85888

HIGH

MEDIUM Priority: 0.06 BB Relevance: 66/100

Published: 2026-10-13 Modified: 2026-10-28 First seen: 2026-10-29 Status: active

Network Low Complexity No Interaction Conf. Impact Scope Change

AV: Network

AC: Low

PR: Low

UI: None

S: Changed

C: High

I: None

A: None

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Vendor	Product	Version
Microsoft	Microsoft SQL Server 2017 (GDR)	14.0.0 < 14.0.2140.2
Microsoft	Microsoft SQL Server 2017 (GDR)	14.0.0 < 14.0.2140.2
Microsoft	Microsoft SQL Server 2017 for x64-based Systems (CU31)	14.0.3006.16 < 14.0.3560.2
Microsoft	Microsoft SQL Server 2017 for x64-based Systems (CU31)	14.0.3006.16 < 14.0.3560.2
Microsoft	Microsoft SQL Server 2019 (GDR)	15.0.0 < 15.0.2200.2
Microsoft	Microsoft SQL Server 2019 (GDR)	15.0.0 < 15.0.2200.2
Microsoft	Microsoft SQL Server 2019 for x64-based Systems (CU32)	15.0.4003.23 < 15.0.4500.2
Microsoft	Microsoft SQL Server 2019 for x64-based Systems (CU32)	15.0.4003.23 < 15.0.4500.2
Microsoft	Microsoft SQL Server 2022 (GDR)	16.0.0 < 16.0.1210.3
Microsoft	Microsoft SQL Server 2022 (GDR)	16.0.0 < 16.0.1210.3
Microsoft	Microsoft SQL Server 2022 for x64-based Systems (CU27)	16.0.4003.1 < 16.0.4305.5
Microsoft	Microsoft SQL Server 2022 for x64-based Systems (CU27)	16.0.4003.1 < 16.0.4305.5
Microsoft	Microsoft SQL Server 2025 for x64-based Systems (CU9)	17.0.4006.2 < 17.0.5015.4
Microsoft	Microsoft SQL Server 2025 for x64-based Systems (CU9)	17.0.4006.2 < 17.0.5015.4
Microsoft	Microsoft SQL Server 2025 for x64-based Systems (GDR)	17.0.1050.2 < 17.0.1145.4
Microsoft	Microsoft SQL Server 2025 for x64-based Systems (GDR)	17.0.1050.2 < 17.0.1145.4

vendor-advisory patch

66 / 100

✓ Network accessible
✓ Low complexity
✓ No user interaction

7.7 / 10.0 v3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C

0.80%

Raw Score 0.007970

Percentile 56.4%

Date 2026-10-29

2026-10-29

0.00797

2026-10-28

0.00797

mitre ref →