UpHeron
All vulnerabilities

Servers and applications

CVE-2026-67628

Microsoft SQL Server Information Disclosure Vulnerability

Severity
Medium 4.9
Published
13 Oct 2026
Last changed
31 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
15.0.2200.2, 15.0.4500.2, 16.0.1210.3, 16.0.4305.5, 17.0.1145.4, 17.0.5015.4
Sources
CVE Program

Affected software

SoftwareAffected versions
Microsoft SQL ServerServers and applications · cna:microsoft|microsoft sql server 20*
  • From 17.0.4006.2 before 17.0.5015.4
  • From 17.0.1050.2 before 17.0.1145.4
  • From 16.0.4003.1 before 16.0.4305.5
  • From 16.0.0 before 16.0.1210.3
All 8 release lines
  • From 14.0.0 before 14.0.2140.2
  • From 14.0.3006.16 before 14.0.3560.2
  • From 15.0.0 before 15.0.2200.2
  • From 15.0.4003.23 before 15.0.4500.2
  • From 16.0.0 before 16.0.1210.3
  • From 16.0.4003.1 before 16.0.4305.5
  • From 17.0.1050.2 before 17.0.1145.4
  • From 17.0.4006.2 before 17.0.5015.4

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-67628