CVE-2026-77482: CWE-122: Heap-based Buffer Overflow in Microsoft Microsoft SQL Server 2017 (CU 31)

This vulnerability, identified as CVE-2026-77482 and categorized under CWE-122 (Heap-based Buffer Overflow), affects Microsoft SQL Server 2017 (CU 31) and related versions. It allows an attacker without privileges to execute arbitrary code remotely by exploiting a heap-based buffer overflow. The CVSS 3.1 base score is 8.8, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. Microsoft has issued an official fix for this vulnerability.

Successful exploitation of this vulnerability could allow an unauthorized attacker to execute arbitrary code on the affected SQL Server instance remotely, potentially leading to full compromise of the server, including confidentiality, integrity, and availability impacts.

An official fix is available from Microsoft. Users should apply the security updates provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77482 to remediate this vulnerability.