CVE-2026-85886 — Vulnerability intelligence

microsoft — sql server 2017

Published: 2026-10-13T21:19:31.143

CVSS

8.5

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Sources

• CVE-2026-85886
• Patch, Vendor Advisory