{"id":"CVE-2026-116940","kind":"vulnerability","aliases":["CVE-2026-116940"],"related":[],"title":"Microsoft SQL Server: out-of-bounds read leaks data to authorized network users","description":"Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.","summary":"An out-of-bounds read in Microsoft SQL Server lets an attacker who already has valid access over the network read memory beyond the intended buffer. The sources say this discloses information, not that it runs code.","severity":"medium","cvss":4.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["microsoft","sql-server","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:19:26+00:00","first_seen_at":"2026-11-10T19:24:46+00:00","triaged_at":"2026-11-10T20:02:54+00:00","updated_at":"2026-11-10T20:02:54+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-11-10T20:02:54Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Microsoft SQL Server: out-of-bounds read leaks data to authorized network users","impact":"low","summary":"An out-of-bounds read in Microsoft SQL Server lets an attacker who already has valid access over the network read memory beyond the intended buffer. The sources say this discloses information, not that it runs code.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["sql-server","microsoft"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"memory contents disclosed to an authorized network attacker","analyst_note":"Check the Microsoft Security Response Center advisory for affected SQL Server builds and the fixed cumulative update; the NVD entry alone gives no product ranges.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000641,"input_tokens":4481,"output_tokens":385,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-116940':17A,20A '-2026':16A,19A 'access':43B 'allow':72C 'alreadi':40B 'attack':38B,75C 'author':12A,74C 'beyond':49B 'bound':7A,30B,67C 'buffer':52B 'code':63B 'cve':15A,18A 'data':10A 'disclos':57B,77C 'inform':58B,78C 'intend':51B 'leak':9A 'let':36B 'memori':48B 'microsoft':1A,21B,33B 'network':13A,46B,81C 'out-of-bound':4A,27B,64C 'read':8A,31B,47B,68C 'run':62B 'say':55B 'server':3A,24B,35B,71C 'sourc':54B 'sql':2A,23B,34B,70C 'sql-server':22B 'user':14A 'valid':42B 'vendor':25B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["medium","microsoft","sqlserver","vendor"],"campaign_type":null,"search_a":"'-116940':17A,20A '-2026':16A,19A 'author':12A 'bound':7A 'cve':15A,18A 'data':10A 'leak':9A 'microsoft':1A 'network':13A 'out-of-bound':4A 'read':8A 'server':3A 'sql':2A 'user':14A","search_b":"'access':43B 'alreadi':40B 'attack':38B 'beyond':49B 'bound':30B 'buffer':52B 'code':63B 'disclos':57B 'inform':58B 'intend':51B 'let':36B 'memori':48B 'microsoft':21B,33B 'network':46B 'out-of-bound':27B 'read':31B,47B 'run':62B 'say':55B 'server':24B,35B 'sourc':54B 'sql':23B,34B 'sql-server':22B 'valid':42B 'vendor':25B","search_c":"'allow':72C 'attack':75C 'author':74C 'bound':67C 'disclos':77C 'inform':78C 'network':81C 'out-of-bound':64C 'read':68C 'server':71C 'sql':70C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:26+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116940","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116940","severity":null,"published_at":"2026-11-10T19:19:26+00:00","modified_at":"2026-11-10T19:19:27+00:00","first_seen_at":"2026-11-10T19:24:46+00:00","fetched_at":"2026-11-10T19:24:46+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}