KB5122768: CVEs fixed (Windows update (KB))

KB5122768 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-67643 CRITICAL 9.8 UPGRADE UPGRADE Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
• CVE-2026-67631 CRITICAL 9.8 UPGRADE UPGRADE Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

Applies to

• Microsoft SQL Server 2022 for x64-based Systems (CU 26) · fixed in 16.0.4275.2

← Back to latest CVEs