CVE-2026-88085 — Vulnerability intelligence

microsoft — sql server 2017

Published: 2026-10-13T21:19:43.057

CVSS

6.4

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

Sources

• CVE-2026-88085
• Patch, Vendor Advisory