CVE-2026-83945

MediumCVSS 6.6/10Last modified Oct 16, 2026

Description

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Metrics

CVSS 3.1 6.6/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 13, 2026
Last modified
Oct 16, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-839466.1Improper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthorized attacker to perfCVE-2026-839476.5Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.CVE-2026-839488.0Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to CVE-2026-839495.5Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.CVE-2026-839515.5Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.CVE-2026-839527.8Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.CVE-2026-839547.8Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.CVE-2026-839557.8Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.CVE-2026-839585.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipuCVE-2026-839597.8Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the contextCVE-2026-83967.5Improper restriction of XML external entity reference vulnerability in Netcad Software Inc. NetGIS allows Serialized Data External Linking. CVE-2026-839605.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu
CVE-2026-83945: Medium severity, CVSS 6.6 | Vulnix