Medium
6.5
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information...
CVE-2026-68783
First seen on SecPulse
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| MicrosoftMicrosoft SQL Server 2025 CU10 |
≥ 17.0.4006.0, < 17.0.5045.3→ 17.0.5045.3 |
17.0.5045.3 |
| MicrosoftMicrosoft SQL Server 2025 for x64-based Systems (GDR) |
≥ 17.0.1050.2, < 17.0.1155.3→ 17.0.1155.3 |
17.0.1155.3 |
Original description The description as published by the source.
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
Source: Microsoft Security Response Center Blog NVD GitHub Advisory
References
- web msrc.microsoft.com
- web nvd.nist.gov
- web github.com