CVE Database›Document archive›CVE-2026-96956

CVE-2026-96956

dotnet8.0: dotnet10.0: dotnet9.0: SQL Server Elevation of Privilege Vulnerability

Loading…

Severity

Important

Red Hat Product Security

7.5

CVSS 3.1

Review impact separately from score.

Published · October 14, 2026

Updated · November 5, 2026

Description

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Statement

Red Hat rates this vulnerability as Important because an unauthenticated remote attacker can exploit the issue over the network without privileges, resulting in substantial CPU exhaustion and complete service disruption. This flaw specifically affects .NET applications running on Red Hat Enterprise Linux that deserialize or process untrusted CBOR data streams using affected runtime libraries. Because the vulnerability cannot lead to unauthorized code execution or breach data confidentiality and integrity, the impact is strictly confined to availability.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 · Allocation of Resources Without Limits or Throttling