‹ Back to list

CVE-2026-116931

High (7.5)—
Schedule the patchSeverity High 7.5. No public exploit or active exploitation known.
Vendor advisory· Microsoft MSRC
Severity7.5High · CVSS 3.1
Exploitation probability0.70 %higher than 54% of CVEs · score from Nov 11, 2026
Active exploitationNonot in the CISA catalog · checked Nov 12, 03:00 AM
Public exploitNot knownno public code found

News and reports on Orbitaley

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Timeline

Built from our own data: NVD, CISA KEV and other exploitation catalogues, FIRST EPSS, public exploits, specialised media and Orbitaley coverage.

  1. CVE record published in NVD
  2. Alert: Microsoft fixes 200 vulnerabilities, including an Outlook flaw CISA confirms is being exploited

ATT&CK techniques

How this vulnerability is exploited and what the attacker gains, in MITRE ATT&CK terms.

Vector AV:N con PR:L (red con privilegios) indica T1210; la descripción dice que un atacante autorizado ejecuta código por red, lo que sustenta T1059 sin especificar intérprete.

Inferred by our analysis agent from the official description, CVSS vector and CWE, and checked by a supervisor. May contain errors.

ATT&CK mitigations that cover these techniques

Privileged Account ManagementDisable or Remove Feature or ProgramVulnerability ScanningThreat Intelligence ProgramRestrict Web-Based ContentNetwork Segmentation

Affected technologies (1)

⚠ AI-inferred from the description — NVD hasn't analyzed this CVE yet, these aren't verified CPEs.

Microsoft — SQL ServerAI

NVD record

NVD status
Awaiting Analysis
Published
Nov 10, 2026
Last modified
Nov 10, 2026
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE)
CWE-122

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2026-116931",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-116931",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-11-10T19:55:48.413928Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "secure@microsoft.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.6
      }
    ]
  },
  "affected": [
    {
      "source": "secure@microsoft.com",
      "affectedData": [
        {
          "vendor": "Microsoft",
          "product": "Microsoft SQL Server 2017 (GDR)",
          "versions": [
            {
              "status": "affected",
              "version": "14.0.0",
              "lessThan": "14.0.2150.2",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "x64-based Systems"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)",
          "versions": [
            {
              "status": "affected",
              "version": "14.0.3006.16",
              "lessThan": "14.0.3570.2",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "x64-based Systems"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft SQL Server 2019 (GDR)",
          "versions": [
            {
              "status": "affected",
              "version": "15.0.0",
              "lessThan": "15.0.2210.4",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "x64-based Systems"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)",
          "versions": [
            {
              "status": "affected",
              "version": "15.0.4003.23",
              "lessThan": "15.0.4510.2",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "x64-based Systems"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft SQL Server 2022 (GDR)",
          "versions": [
            {
              "status": "affected",
              "version": "16.0.0",
              "lessThan": "16.0.1220.3",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "x64-based Systems"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)",
          "versions": [
            {
              "status": "affected",
              "version": "16.0.4003.1",
              "lessThan": "16.0.4315.2",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "x64-based Systems"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft SQL Server 2025 CU10",
          "versions": [
            {
              "status": "affected",
              "version": "17.0.4006.0",
              "lessThan": "17.0.5045.3",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "x64-based Systems"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)",
          "versions": [
            {
              "status": "affected",
              "version": "17.0.1050.2",
              "lessThan": "17.0.1155.3",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "x64-based Systems"
          ]
        }
      ]
    }
  ],
  "published": "2026-11-10T19:19:23.410",
  "references": [
    {
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116931",
      "source": "secure@microsoft.com"
    }
  ],
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "secure@microsoft.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-122"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network."
    }
  ],
  "lastModified": "2026-11-10T20:18:07.633",
  "sourceIdentifier": "secure@microsoft.com"
}