---
id: "CVE-2026-67375"
page: "https://infrastack.ai/live/CVE-2026-67375"
kind: "vulnerability"
aliases: ["CVE-2026-67375"]
title: "Microsoft SQL Server: stack overflow lets an authorized user gain higher privileges"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "sql-server-2025-gdr", "fixed": ["17.0.1155.3"], "affected": ">= 17.0.1050.2, < 17.0.1155.3", "ecosystem": "vendor"}]
ecosystems: []
tags: ["database", "infrastructure", "privilege-escalation", "sql-server", "windows"]
not_affected_if: ["no-sql-server", "no-untrusted-accounts"]
published_at: "2026-11-10T19:21:17+00:00"
first_seen_at: "2026-11-10T19:25:16+00:00"
updated_at: "2026-11-10T21:19:38+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67375", "first_seen_at": "2026-11-10T19:25:16+00:00"}, {"source": "analyst", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67375", "first_seen_at": "2026-11-10T21:19:38+00:00", "cites": ["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67375", "https://app.opencve.io/cve/CVE-2026-67375"]}]
exploit_sources: []
---

# Microsoft SQL Server: stack overflow lets an authorized user gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-67375 (this .md is for agents)

A stack-based buffer overflow (CWE-121) in SQL Server lets an authenticated low-privilege user raise privileges over the network (CVSS 8.8, Microsoft, published 2026-11-10). Microsoft's CVE record lists SQL Server 2025 GDR builds below 17.0.1155.3 as affected. No exploitation is reported.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:sql-server-2025-gdr affected >= 17.0.1050.2, < 17.0.1155.3 fixed 17.0.1155.3

## How to check

Run SELECT @@VERSION; or SELECT SERVERPROPERTY('ProductVersion'); on each SQL Server. On the SQL Server 2025 GDR branch, a build below 17.0.1155.3 is listed as affected. Also check your 2017, 2019 and 2022 instances against the November 2026 security update on Microsoft's MSRC page for this CVE, since the record read here does not list them.

## Fix

SQL Server 2025 GDR: update to 17.0.1155.3 or later (from the CVE record via OpenCVE; the KB number was not confirmed).

## Timeline

- 2026-11-10T19:25:16+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-67375
- 2026-11-10T21:19:38+00:00 analyst https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67375 — MSRC page is JS-only and unreadable here; data from the CVE record as mirrored by OpenCVE (Microsoft CNA): only SQL Server 2025 GDR 17.0.1050.2 to <17.0.1155.3 listed. Other branches (2017-2022) not listed in that record; unconfirmed. No exploitation or PoC found. Nothing verified.

## Documents

- [advisory] MSRC: CVE-2026-67375 (page is JavaScript-only; not read) https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67375
- [describes] OpenCVE: CVE-2026-67375 (mirrors Microsoft CNA record) https://app.opencve.io/cve/CVE-2026-67375

## From the sources

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_