[NEU] [hoch] Microsoft SQL Server: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Microsoft SQL Server 2017, SQL Server 2019 und SQL Server 2022 ausnutzen, um seine Berechtigungen zu erweitern – unter anderem auf SQL-Sysadmin- oder SYSTEM-Rechte –, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und Sicherheitsmaßnahmen zu umgehen.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3271
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-668190.73% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 52% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-687800.74% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 52% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-673680.70% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 51% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-673760.83% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 56% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-673700.67% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 50% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-676480.55% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 44% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-687750.49% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 41% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-687770.74% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 52% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-687780.74% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 52% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-668200.53% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 43% of all EPSS-scored CVEs.
Referenced CVEs
+12 more CVEs referenced in this advisory.
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownMultiples vulnérabilités dans les produits Microsoft (09 septembre 2026)cert-fr-avis
- unknownNCSC-2026-0350 [1.00] [M/H] Kwetsbaarheden verholpen in SQL Serverncsc-nl
- highCVE-2026-78456: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a …nvd
- highCVE-2026-78442: Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code o…nvd
- mediumCVE-2026-78441: Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information o…nvd
- mediumCVE-2026-77488: Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose…nvd
- highCVE-2026-77487: Improper access control in SQL Server allows an authorized attacker to elevate privileges over…nvd
- highCVE-2026-77486: Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code o…nvd
- highCVE-2026-77485: Use after free in SQL Server allows an authorized attacker to elevate privileges locally.nvd
- highCVE-2026-77484: Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code …nvd
- highCVE-2026-77483: Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a n…nvd
- highCVE-2026-77482: Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over …nvd
Recent advisories for Microsoft SQL Server
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- highCVE-2026-68787: Microsoft SQL Server Remote Code Execution Vulnerabilitymsrc · 2026-09-08
- highCVE-2026-67379: Microsoft SQL Server Remote Code Execution Vulnerabilitymsrc · 2026-09-08
- mediumCVE-2026-68776: Microsoft SQL Server Information Disclosure Vulnerabilitymsrc · 2026-09-08
- mediumCVE-2026-68784: Microsoft SQL Server Information Disclosure Vulnerabilitymsrc · 2026-09-08
- highCVE-2026-67376: Microsoft SQL Server Denial of Service Vulnerabilitymsrc · 2026-09-08
- highCVE-2026-66814: Microsoft SQL Server Elevation of Privilege Vulnerabilitymsrc · 2026-09-08
More from CERT-Bund (BSI) Security Advisories
- medium[UPDATE] [mittel] OpenSSH: Mehrere Schwachstellen2026-09-10
- medium[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen2026-09-10
- high[UPDATE] [hoch] OpenVPN: Mehrere Schwachstellen2026-09-10
- medium[UPDATE] [mittel] gzip: Mehrere Schwachstellen2026-09-10
- medium[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen2026-09-10