{"dataType":"CVE_RECORD","dataVersion":"5.0","cveMetadata":{"cveId":"GCVE-110-NCSC-2026-476","assignerOrgId":"","assignerShortName":"Vulnetix","state":"PUBLISHED","datePublished":"2026-11-10T20:03:16Z","dateUpdated":"","dateReserved":""},"containers":{"cna":{"providerMetadata":null,"title":"","descriptions":[{"lang":"nl","value":"Execution with unnecessary privileges in SQL Server enables an authorized attacker to elevate their privileges over a network, potentially compromising system security.","supportingMedia":null},{"lang":"nl","value":"Improper neutralization of special elements in SQL Server commands, known as command injection, allows unauthorized attackers to remotely execute arbitrary code.","supportingMedia":null},{"lang":"nl","value":"A heap-based buffer overflow vulnerability in Microsoft SQL Server allows an authorized attacker to remotely execute code over a network.","supportingMedia":null},{"lang":"nl","value":"An out-of-bounds read vulnerability in Microsoft SQL Server enables an authorized attacker to disclose sensitive information over a network.","supportingMedia":null},{"lang":"nl","value":"An untrusted pointer dereference vulnerability in Microsoft SQL Server enables an authorized attacker to elevate privileges remotely over a network.","supportingMedia":null},{"lang":"nl","value":"A buffer over-read vulnerability in Microsoft SQL Server allows an authorized attacker to disclose sensitive information over a network.","supportingMedia":null},{"lang":"nl","value":"A stack-based buffer overflow vulnerability in Microsoft SQL Server allows an authorized attacker to remotely execute arbitrary code over a network.","supportingMedia":null},{"lang":"nl","value":"A buffer over-read vulnerability in Microsoft SQL Server allows unauthorized attackers to disclose sensitive information over a network.","supportingMedia":null},{"lang":"nl","value":"A heap-based buffer overflow vulnerability in Microsoft SQL Server allows an authorized attacker to elevate privileges remotely over a network.","supportingMedia":null},{"lang":"nl","value":"A heap-based buffer overflow vulnerability in Microsoft SQL Server allows unauthorized remote attackers to execute arbitrary code over a network.","supportingMedia":null},{"lang":"nl","value":"A broken or risky cryptographic algorithm in SQL Server enables unauthorized attackers to disclose sensitive information over a network.","supportingMedia":null},{"lang":"nl","value":"An out-of-bounds read vulnerability in Microsoft SQL Server allows unauthorized attackers to disclose sensitive information over a network, potentially compromising data confidentiality.","supportingMedia":null},{"lang":"nl","value":"An uninitialized resource vulnerability in Microsoft SQL Server allows an authorized attacker to disclose sensitive information over a network, potentially compromising data confidentiality.","supportingMedia":null},{"lang":"nl","value":"Improper neutralization of special elements in SQL Server commands, known as SQL injection, allows an authorized attacker to elevate privileges over a network.","supportingMedia":null},{"lang":"nl","value":"Improper authorization in SQL Server allows an authorized attacker to elevate privileges over a network, potentially compromising system security.","supportingMedia":null},{"lang":"nl","value":"An origin validation error in SQL Server allows an authorized attacker to elevate privileges over a network, potentially compromising system security.","supportingMedia":null},{"lang":"nl","value":"An improper control of code generation vulnerability in SQL Server allows an authorized attacker to perform code injection and elevate privileges over a network.","supportingMedia":null},{"lang":"nl","value":"Improper neutralization of special elements in SQL Server commands, known as SQL injection, allows an authorized attacker to locally elevate privileges within the system.","supportingMedia":null},{"lang":"nl","value":"An authentication bypass vulnerability via capture-replay in SQL Server allows unauthorized attackers to disclose sensitive information over a network.","supportingMedia":null},{"lang":"nl","value":"An out-of-bounds read vulnerability in Microsoft SQL Server allows an unauthorized attacker to elevate privileges remotely over a network.","supportingMedia":null},{"lang":"nl","value":"An improper verification of cryptographic signatures in the JDBC Driver for SQL Server enables unauthorized attackers to bypass security features over a network.","supportingMedia":null},{"lang":"nl","value":"A dangerous method or function exposed in SQL Server allows an authorized attacker to elevate privileges remotely over a network, posing significant security risks.","supportingMedia":null}],"references":[{"url":"https://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0476.json","name":"","tags":["advisory"]},{"url":"https://portal.msrc.microsoft.com/en-us/security-guidance","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116929.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116930.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116931.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116932.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116933.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116934.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116935.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116936.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116937.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116938.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116939.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116940.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116941.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116942.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116943.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116944.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116945.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116946.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116947.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-118102.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-118103.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-118104.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-118105.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-118106.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-118108.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-118109.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-118110.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-118111.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-118112.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-118113.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-118114.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-118115.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-118116.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-118117.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-118118.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-118119.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-118120.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-45478.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62903.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-66813.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-67372.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-67374.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-67382.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-67387.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-67391.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-67632.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-67637.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-67646.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-68783.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-69893.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-70003.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84010.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-88111.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-94511.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-94513.json","name":"","tags":["advisory"]}],"metrics":[{"format":"","scenarios":null,"cvssV2_0":null,"cvssV3_0":null,"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","baseScore":8,"baseSeverity":"HIGH"},"cvssV4_0":null,"other":null}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Execution with Unnecessary Privileges","cweId":"CWE-250","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Improper Neutralization of Special Elements used in a Command","cweId":"CWE-77","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Heap-based Buffer Overflow","cweId":"CWE-122","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Out-of-bounds Read","cweId":"CWE-125","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Untrusted Pointer Dereference","cweId":"CWE-822","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Buffer Over-read","cweId":"CWE-126","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Stack-based Buffer Overflow","cweId":"CWE-121","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Use of a Broken or Risky Cryptographic Algorithm","cweId":"CWE-327","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Use of Uninitialized Resource","cweId":"CWE-908","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Improper Neutralization of Special Elements used in an SQL Command","cweId":"CWE-89","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Origin Validation Error","cweId":"CWE-346","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Improper Control of Generation of Code","cweId":"CWE-94","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Authentication Bypass by Capture-replay","cweId":"CWE-294","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Improper Verification of Cryptographic Signature","cweId":"CWE-347","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Exposed Dangerous Method or Function","cweId":"CWE-749","type":"CWE"}]}],"affected":[{"vendor":"Microsoft","product":"vers:unknown/*","collectionURL":"","packageName":"","repo":"","defaultStatus":"","versions":null,"cpes":null,"modules":null,"programFiles":null,"platforms":null}],"cpeApplicability":null,"rejectedReasons":null,"replacedBy":null,"x_vulnetix_aliases":{"direct":["CVE-2026-116929","CVE-2026-116930","CVE-2026-116931","CVE-2026-116932","CVE-2026-116933","CVE-2026-116934","CVE-2026-116935","CVE-2026-116936","CVE-2026-116937","CVE-2026-116938","CVE-2026-116939","CVE-2026-116940","CVE-2026-116941","CVE-2026-116942","CVE-2026-116943","CVE-2026-116944","CVE-2026-116945","CVE-2026-116946","CVE-2026-116947","CVE-2026-118102","CVE-2026-118103","CVE-2026-118104","CVE-2026-118105","CVE-2026-118106","CVE-2026-118108","CVE-2026-118109","CVE-2026-118110","CVE-2026-118111","CVE-2026-118112","CVE-2026-118113","CVE-2026-118114","CVE-2026-118115","CVE-2026-118116","CVE-2026-118117","CVE-2026-118118","CVE-2026-118119","CVE-2026-118120","CVE-2026-62903","CVE-2026-66813","CVE-2026-67372","CVE-2026-67374","CVE-2026-67382","CVE-2026-67387","CVE-2026-67391","CVE-2026-67632","CVE-2026-67637","CVE-2026-67646","CVE-2026-68783","CVE-2026-70003","CVE-2026-84010","CVE-2026-88111","CVE-2026-94511","CVE-2026-94513"]}},"adp":null}}