MSRC-CVE-2026-68787 — Microsoft SQL Server Remote Code Execution Vulnerability

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who successfully exploited this vulnerability could gain SQL sysadmin privileges.

Security updates
14.0.2130.4 — https://support.microsoft.com/help/5122775
15.0.2190.7 — https://support.microsoft.com/help/5122773
14.0.3550.4 — https://support.microsoft.com/help/5122774
16.0.1200.5 — https://support.microsoft.com/help/5122771
17.0.1135.8 — https://support.microsoft.com/help/5122770
15.0.4490.9 — https://support.microsoft.com/help/5122772
16.0.4275.2 — https://support.microsoft.com/help/5122768
17.0.4085.5 — https://support.microsoft.com/help/5122769

Vulnerabilities 1

High 7.8

CVE-2026-68787

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

Microsoft Microsoft SQL Server 2019 (GDR) Microsoft SQL Server 2022 (GDR) Microsoft SQL Server 2017 (GDR)

Sep 8, 2026

Revision history

2026-09-08 #1
Information published.

References

CVE-2026-68787 Microsoft SQL Server Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68787
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss