All vulnerabilities

Servers and applications

CVE-2026-118103

Microsoft SQL Server Information Disclosure Vulnerability

Severity
Medium 6.5
Published
10 Nov 2026
Last changed
10 Nov 2026
Added to UpHeron
10 Nov 2026
Fixed in
15.0.2210.4, 15.0.4510.2, 16.0.1220.3, 16.0.4315.2, 17.0.1155.3, 17.0.5045.3
Sources
CVE Program

Affected software

SoftwareAffected versions
Microsoft SQL ServerServers and applications · cna:microsoft|microsoft sql server 20*
  • From 17.0.4006.0 before 17.0.5045.3
  • From 17.0.1050.2 before 17.0.1155.3
  • From 16.0.4003.1 before 16.0.4315.2
  • From 16.0.0 before 16.0.1220.3
All 8 release lines
  • From 14.0.0 before 14.0.2150.2
  • From 14.0.3006.16 before 14.0.3570.2
  • From 15.0.0 before 15.0.2210.4
  • From 15.0.4003.23 before 15.0.4510.2
  • From 16.0.0 before 16.0.1220.3
  • From 16.0.4003.1 before 16.0.4315.2
  • From 17.0.1050.2 before 17.0.1155.3
  • From 17.0.4006.0 before 17.0.5045.3

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-118103