8.8 HighCWE-822
CVE-2026-33120
Microsoft SQL Server 2022 (GDR) vulnerability
MicrosoftMicrosoft SQL Server 2022 (GDR)
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.9%probability of exploitation in the next 30 days
Higher than 60% of scored CVEs
SeverityCVSS
8.8High
Description NVD
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.
Coverage 1 article · 1 outlet
- Microsoft fixes 167 flaws, patches SharePoint zero day exploitKrebs on Security · first in our coverage · mentions it in passing