Summary
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
Details
How could an attacker exploit this vulnerability?
An attacker who is authenticated to an affected SQL Server instance and able to create and execute a CLR (SAFE) stored procedure could call a data-handling API with a specially crafted parameter to trigger an out-of-bounds memory write inside the SQL Server process. Successful exploitation could allow the attacker to execute code in the context of the SQL Server service account. Network access and authentication are required; user interaction is not required.
Security updates
14.0.2130.4 — https://support.microsoft.com/help/5122775
15.0.2190.7 — https://support.microsoft.com/help/5122773
14.0.3550.4 — https://support.microsoft.com/help/5122774
16.0.1200.5 — https://support.microsoft.com/help/5122771
17.0.1135.8 — https://support.microsoft.com/help/5122770
15.0.4490.9 — https://support.microsoft.com/help/5122772
17.0.4085.5 — https://support.microsoft.com/help/5122769
16.0.4275.2 — https://support.microsoft.com/help/5122768
Vulnerabilities 1
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Revision history
-
#1
Information published.
References
-
CVE-2026-77481 Microsoft SQL Server Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77481
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss