Product:
SQL Server
Summary
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network. This vulnerability can lead to significant impacts on confidentiality, integrity, and availability. Attackers with low privileges can exploit this issue without user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2026-33120 |
Exploitation
To exploit this vulnerability, an attacker must have authorized access to the SQL Server and can then send specially crafted requests over the network. By manipulating pointers, the attacker can execute arbitrary code, potentially leading to a full compromise of the server and its data.
Affected Products
- SQL Server: Vulnerable to untrusted pointer dereference, allowing code execution over the network.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, restricting network access to the SQL Server and monitoring for unusual activity can help reduce the risk of exploitation.