CVE-2026-88089 — Vulnerability intelligence

microsoft — sql server 2017

Published: 2026-10-13T21:19:43.430

CVSS

6.7

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

Sources

• CVE-2026-88089
• Patch, Vendor Advisory