{"id":"CVE-2026-67382","kind":"vulnerability","aliases":["CVE-2026-67382"],"related":[],"title":"Microsoft SQL Server: uninitialized memory lets an authorized user read data","description":"Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.","summary":"SQL Server reads a resource it never initialized, so an attacker who already holds valid credentials can see information they should not. The attack works over the network against a reachable SQL Server instance.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["databases","microsoft","sql-server","vendor"],"not_affected_if":["no-authorized-user-access"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:21:18+00:00","first_seen_at":"2026-11-10T19:25:16+00:00","triaged_at":"2026-11-10T19:56:11+00:00","updated_at":"2026-11-10T19:56:11+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-11-10T19:56:11Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Microsoft SQL Server: uninitialized memory lets an authorized user read data","impact":"low","summary":"SQL Server reads a resource it never initialized, so an attacker who already holds valid credentials can see information they should not. The attack works over the network against a reachable SQL Server instance.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["sql-server","microsoft","databases"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"authorized user reads memory contents they should not see","analyst_note":"Check the Microsoft Security Update Guide entry for CVE-2026-67382 for affected SQL Server versions and the fixed build.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-authorized-user-access"],"who_is_affected":"Organizations running Microsoft SQL Server where users hold valid database logins and the server is reachable over the network. The sources do not list affected versions or configurations, so unknown beyond that.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000656,"input_tokens":4483,"output_tokens":415,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-67382':14A,17A 'allow':65C 'alreadi':36B 'attack':34B,47B,68C 'author':8A,67C 'credenti':39B 'cve':12A,15A 'data':11A 'databas':18B 'disclos':70C 'hold':37B 'inform':42B,71C 'initi':31B 'instanc':57B 'let':6A 'memori':5A 'microsoft':1A,19B 'network':51B,74C 'never':30B 'reachabl':54B 'read':10A,26B 'resourc':28B,61C 'see':41B 'server':3A,22B,25B,56B,64C 'sql':2A,21B,24B,55B,63C 'sql-server':20B 'uniniti':4A,60C 'use':58C 'user':9A 'valid':38B 'vendor':23B 'work':48B","nicknames":[],"mitigations":[],"who_affected":"Organizations running Microsoft SQL Server where users hold valid database logins and the server is reachable over the network. The sources do not list affected versions or configurations, so unknown beyond that.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["databases","medium","microsoft","sqlserver","vendor"],"campaign_type":null,"search_a":"'-2026':13A,16A '-67382':14A,17A 'author':8A 'cve':12A,15A 'data':11A 'let':6A 'memori':5A 'microsoft':1A 'read':10A 'server':3A 'sql':2A 'uniniti':4A 'user':9A","search_b":"'alreadi':36B 'attack':34B,47B 'credenti':39B 'databas':18B 'hold':37B 'inform':42B 'initi':31B 'instanc':57B 'microsoft':19B 'network':51B 'never':30B 'reachabl':54B 'read':26B 'resourc':28B 'see':41B 'server':22B,25B,56B 'sql':21B,24B,55B 'sql-server':20B 'valid':38B 'vendor':23B 'work':48B","search_c":"'allow':65C 'attack':68C 'author':67C 'disclos':70C 'inform':71C 'network':74C 'resourc':61C 'server':64C 'sql':63C 'uniniti':60C 'use':58C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:21:18+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-67382","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67382","severity":null,"published_at":"2026-11-10T19:21:18+00:00","modified_at":"2026-11-10T19:21:18+00:00","first_seen_at":"2026-11-10T19:25:16+00:00","fetched_at":"2026-11-10T19:25:16+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}