SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-42990

CRITICAL · CVSS 9.8 EPSS 0.67%

Source: NVD + CISA KEV + EPSS · Published 2026-07-14 · Last synced 2026-08-13

CyberRota Analysis

AI-Generated

A heap-based buffer overflow vulnerability in the SQL Server ODBC driver enables unauthorized attackers to execute arbitrary code remotely, posing a critical risk to affected systems. Organizations utilizing SQL Server ODBC drivers should prioritize patching this vulnerability to mitigate potential exploitation and safeguard their data integrity.

CVE
CVE-2026-42990
Severity
CRITICAL
CVSS
9.8
EPSS
0.67%

Original NVD Description

Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-87654 CRITICAL CVE-2026-87653 MEDIUM CVE-2026-87648 HIGH CVE-2026-87644 HIGH CVE-2026-87621 CRITICAL CVE-2026-87618 HIGH