CVE-2026-66813

HighCVSS 8.1/10Last modified Nov 11, 2026

Description

Out-of-bounds read in SQL Server allows an unauthorized attacker to elevate privileges over a network.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 11, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-668148.8Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-668166.5Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.CVE-2026-668188.8Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-668198.8Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate CVE-2026-66827.6In FatFS R0.16 and earlier contains a FAT32 integer overflow bug in mount_volume() where fasize *= fs->n_fats can wrap, leading to attacker-CVE-2026-668208.8Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate CVE-2026-668225.9Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.CVE-2026-668249.2A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the serialized capture CVE-2026-668256.9Pivotick contains a cross-site scripting vulnerability in the sidebar property-list component. Values associated with link-like properties, CVE-2026-668296.1URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows a remote attacker CVE-2026-66834.6FatFs R0.16 and earlier contains a divide-by-zero in exFAT sync logic bug when crafted metadata causes n_fatent - 2 to be zero during write/CVE-2026-668326.5When the Mira Android app opens in-app WebView content (e.g., shop redirect flows), the user's live session token is appended to the URL as
CVE-2026-66813: High severity, CVSS 8.1 | Vulnix