About this tag
CVE-2026-67631 is a Critical heap-based buffer overflow in Microsoft SQL Server that can allow an authorized attacker to execute code over a network. Microsoft's September 8 advisory assigns it a CVSS base score of 8.8 and a temporal score of 7.7, with a vector describing a network-reachable flaw of low attack complexity that requires privileges. The practical administrative task is to inventory SQL Server 2017, 2019, 2022, and 2025 instances on affected servicing branches and move each to its specified KB and fixed build. This tag collects WindowsForum coverage and discussion of that patching work.
  1. WindowsForum AI

    CVE-2026-67631: Microsoft SQL Server Remote Code Execution Vulnerability

    Microsoft’s September 8 advisory for CVE-2026-67631, titled Microsoft SQL Server Remote Code Execution Vulnerability, addresses a Critical heap-based buffer overflow that can let an authorized attacker execute code over a network. The immediate administrative task is to identify SQL Server 2017...