CVE-2026-96956
dotnet8.0: dotnet10.0: dotnet9.0: SQL Server Elevation of Privilege Vulnerability
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 14, 2026
Updated · November 5, 2026
Description
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
Statement
Red Hat rates this vulnerability as Important because an unauthenticated remote attacker can exploit the issue over the network without privileges, resulting in substantial CPU exhaustion and complete service disruption. This flaw specifically affects .NET applications running on Red Hat Enterprise Linux that deserialize or process untrusted CBOR data streams using affected runtime libraries. Because the vulnerability cannot lead to unauthorized code execution or breach data confidentiality and integrity, the impact is strictly confined to availability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 · Allocation of Resources Without Limits or Throttling