Skip to content

Exploited: 178

LatestCVE-2026-95731 — Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access

7.0

CVE-2026-88082Fix available

Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Microsoft SQL Server 2019 (GDR)2026-10-13 21:19 UTC1 min readRead in

Summary

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

Remediation

Inventory every Microsoft Microsoft SQL Server 2019 (GDR) deployment, including staging.
Upgrade Microsoft Microsoft SQL Server 2019 (GDR) to the fixed version for your release line, listed under Affected versions.
Confirm the running version after the upgrade.

References

Patchhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88082

CVSS vector

Attack vector: Local
Complexity: High
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected versions

Version	Fixed in
15.0.0 – <15.0.2200.2	15.0.2200.2
15.0.4003.23 – <15.0.4500.2	15.0.4500.2
16.0.0 – <16.0.1210.3	16.0.1210.3
16.0.4003.1 – <16.0.4305.5	16.0.4305.5
17.0.4006.2 – <17.0.5015.4	17.0.5015.4
17.0.1050.2 – <17.0.1145.4	17.0.1145.4
15.0.2000.5 – <15.0.2200.2	15.0.2200.2
16.0.1000.6 – <16.0.1210.3	16.0.1210.3
17.0.1000.7 – <17.0.1145.4	17.0.1145.4

Weakness

CWE-122

Exploit probability (EPSS)

0.2%

Timeline

2026-10-13Publicly disclosed

Sources

NVD · CVE