CVE-2026-33120

Summary

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.

Affected Software

VendorProductVersion RangeStatus
MicrosoftMicrosoft SQL Server 2022 (GDR)16.0.0 < 16.0.1175.1affected

Weaknesses

  • CWE-822: CWE-822: Untrusted Pointer Dereference

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References