{"id":"CVE-2026-116699","kind":"vulnerability","aliases":["CVE-2026-116699"],"related":[],"title":"Microsoft WDAC OLE DB provider for SQL: heap overflow allows network code execution","description":"Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.","summary":"A heap-based buffer overflow in the Microsoft WDAC OLE DB provider for SQL lets an unauthorized attacker run code over a network. NVD scores it CVSS 6.5 (medium).","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ole-db","other","sql-server","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:19:11+00:00","first_seen_at":"2026-11-10T19:24:44+00:00","triaged_at":"2026-11-10T19:57:52+00:00","updated_at":"2026-11-10T19:57:52+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-11-10T19:57:52Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Microsoft WDAC OLE DB provider for SQL: heap overflow allows network code execution","impact":"high","summary":"A heap-based buffer overflow in the Microsoft WDAC OLE DB provider for SQL lets an unauthorized attacker run code over a network. NVD scores it CVSS 6.5 (medium).","audience":"businesses","category":"other","nicknames":[],"who_cares":["windows","sql-server","ole-db"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker runs code over the network on affected machines","analyst_note":"Check the Microsoft Security Update Guide entry for CVE-2026-116699 for affected versions, fixed builds, and whether authentication or user action is required.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Systems that use the Microsoft WDAC OLE DB provider for SQL to connect to databases are the likely exposure, but the sources do not name affected versions or the exact trigger. unknown","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000669,"input_tokens":4515,"output_tokens":434,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-116699':16A,19A '-2026':15A,18A '6.5':56B 'allow':10A,71C 'attack':46B,74C 'base':31B,60C 'buffer':32B,61C 'code':12A,48B,77C 'cve':14A,17A 'cvss':55B 'db':4A,22B,39B,67C 'execut':13A,76C 'heap':8A,30B,59C 'heap-bas':29B,58C 'let':43B 'medium':57B 'microsoft':1A,36B,64C 'network':11A,51B,80C 'nvd':52B 'ole':3A,21B,38B,66C 'ole-db':20B 'overflow':9A,33B,62C 'provid':5A,40B,68C 'run':47B 'score':53B 'server':26B 'sql':7A,25B,42B,70C 'sql-server':24B 'unauthor':45B,73C 'wdac':2A,37B,65C 'window':27B","nicknames":[],"mitigations":[],"who_affected":"Systems that use the Microsoft WDAC OLE DB provider for SQL to connect to databases are the likely exposure, but the sources do not name affected versions or the exact trigger. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["medium","oledb","other","sqlserver","windows"],"campaign_type":null,"search_a":"'-116699':16A,19A '-2026':15A,18A 'allow':10A 'code':12A 'cve':14A,17A 'db':4A 'execut':13A 'heap':8A 'microsoft':1A 'network':11A 'ole':3A 'overflow':9A 'provid':5A 'sql':7A 'wdac':2A","search_b":"'6.5':56B 'attack':46B 'base':31B 'buffer':32B 'code':48B 'cvss':55B 'db':22B,39B 'heap':30B 'heap-bas':29B 'let':43B 'medium':57B 'microsoft':36B 'network':51B 'nvd':52B 'ole':21B,38B 'ole-db':20B 'overflow':33B 'provid':40B 'run':47B 'score':53B 'server':26B 'sql':25B,42B 'sql-server':24B 'unauthor':45B 'wdac':37B 'window':27B","search_c":"'allow':71C 'attack':74C 'base':60C 'buffer':61C 'code':77C 'db':67C 'execut':76C 'heap':59C 'heap-bas':58C 'microsoft':64C 'network':80C 'ole':66C 'overflow':62C 'provid':68C 'sql':70C 'unauthor':73C 'wdac':65C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:11+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116699","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116699","severity":null,"published_at":"2026-11-10T19:19:11+00:00","modified_at":"2026-11-10T19:19:11+00:00","first_seen_at":"2026-11-10T19:24:44+00:00","fetched_at":"2026-11-10T19:24:44+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}