Description
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
Published: 2026-10-13
Score: 7 High
EPSS: < 1% Very Low
KEV: No
Impact: Local Privilege Escalation
Action: Apply Patch
AI Analysis

Impact

A heap-based buffer overflow in Microsoft SQL Server allows an authorized attacker to elevate privileges locally. The vulnerability is a classic memory corruption flaw (CWE-122) that provides local privilege escalation.

Affected Systems

Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU32), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU27), Microsoft SQL Server 2025 (CU8), Microsoft SQL Server 2025 for x64-based Systems (CU9), and Microsoft SQL Server 2025 for x64-based Systems (GDR).

Risk and Exploitability

The CVSS score of 7.0 indicates high impact. The EPSS score is below 1%, indicating low current exploitation probability. The vulnerability is not listed in the CISA KEV catalog. Because it requires authorized local access, only users with legitimate credentials can trigger the flaw, which would let them raise their privileges on the affected system.

Generated by OpenCVE AI on October 16, 2026 at 03:15 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the latest cumulative update from Microsoft that addresses CVE-2026-85919 for the affected SQL Server version.
  • Ensure that the SQL Server service runs under a least‑privileged account and that local administrative accounts are restricted from normal database operations.
  • Monitor for anomalous privilege escalations or unusual database activity that may indicate exploitation of this vulnerability.

Generated by OpenCVE AI on October 16, 2026 at 03:15 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Microsoft microsoft Sql Server 2019 (gdr)
Microsoft microsoft Sql Server 2022 (gdr)
Microsoft microsoft Sql Server 2025 (cu8)
Microsoft microsoft Sql Server 2025 For X64-based Systems (gdr)
Vendors & Products Microsoft microsoft Sql Server 2019 (gdr)
Microsoft microsoft Sql Server 2022 (gdr)
Microsoft microsoft Sql Server 2025 (cu8)
Microsoft microsoft Sql Server 2025 For X64-based Systems (gdr)

Wed, 14 Oct 2026 09:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 21:00:00 +0000

Type Values Removed Values Added
Description Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
Title Microsoft SQL Server Elevation of Privilege Vulnerability
First Time appeared Microsoft
Microsoft microsoft Sql Server 2019 For X64-based Systems \(cu32\)
Microsoft microsoft Sql Server 2022 For X64-based Systems \(cu27\)
Microsoft microsoft Sql Server 2025 For X64-based Systems \(cu9\)
Microsoft sql Server 2019
Microsoft sql Server 2022
Microsoft sql Server 2025
Weaknesses CWE-122
CPEs cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\(cu32\):*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\(cu27\):*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\(cu9\):*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*
cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*
cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*
Vendors & Products Microsoft
Microsoft microsoft Sql Server 2019 For X64-based Systems \(cu32\)
Microsoft microsoft Sql Server 2022 For X64-based Systems \(cu27\)
Microsoft microsoft Sql Server 2025 For X64-based Systems \(cu9\)
Microsoft sql Server 2019
Microsoft sql Server 2022
Microsoft sql Server 2025
References
Metrics cvssV3_1

{'score': 7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}

Subscriptions

Microsoft Microsoft Sql Server 2019 (gdr) Microsoft Sql Server 2019 For X64-based Systems \(cu32\) Microsoft Sql Server 2022 (gdr) Microsoft Sql Server 2022 For X64-based Systems \(cu27\) Microsoft Sql Server 2025 (cu8) Microsoft Sql Server 2025 For X64-based Systems (gdr) Microsoft Sql Server 2025 For X64-based Systems \(cu9\) Sql Server 2019 Sql Server 2022 Sql Server 2025
cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2026-10-31T18:10:30.579Z

Reserved: 2026-09-04T18:21:15.993Z

Link: CVE-2026-85919

cve-icon Vulnrichment

Updated: 2026-10-13T22:04:19.732Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-13T21:19:34.053

Modified: 2026-11-02T18:45:56.250

Link: CVE-2026-85919

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-23T20:30:17Z

Weaknesses
  • CWE-122

    Heap-based Buffer Overflow