Executive brief
Microsoft SQL Server contains an out-of-bounds memory read vulnerability that allows an authorized database user to access sensitive information and transmit it over the network. An attacker with valid database credentials could exploit this to disclose confidential data such as encryption keys, passwords, or other sensitive values stored in memory, potentially compromising data security and regulatory compliance.
Technical details
The vulnerability is an out-of-bounds read in SQL Server's memory handling. The flaw requires an authenticated user with database access to exploit. An attacker with valid credentials can craft specific queries or operations to trigger the out-of-bounds read, allowing them to read adjacent memory regions and exfiltrate sensitive data over the network. The vulnerability does not allow code execution or privilege escalation, but information disclosure is achievable. Microsoft has published a security update to remediate this issue.
Affected products
- Microsoft SQL Server
Timeline
- 2026-09-08: disclosed