---
id: "CVE-2026-85838"
page: "https://infrastack.ai/live/CVE-2026-85838"
kind: "vulnerability"
aliases: ["CVE-2026-85838"]
title: "Microsoft WDAC OLE DB provider for SQL: heap overflow lets attacker run code"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["ole-db", "sql-server", "user-interaction", "vendor", "wdac", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:21:25+00:00"
first_seen_at: "2026-11-10T19:25:18+00:00"
updated_at: "2026-11-10T21:08:36+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85838", "first_seen_at": "2026-11-10T19:25:18+00:00"}, {"source": "analyst", "url": "https://app.opencve.io/cve/CVE-2026-85838", "first_seen_at": "2026-11-10T21:08:36+00:00", "cites": ["https://app.opencve.io/cve/CVE-2026-85838"]}]
exploit_sources: []
---

# Microsoft WDAC OLE DB provider for SQL: heap overflow lets attacker run code

Link for people: https://infrastack.ai/live/CVE-2026-85838 (this .md is for agents)

Heap-based buffer overflow (CWE-122) in the Microsoft WDAC OLE DB provider for SQL. An unauthorized attacker can execute code over a network. The CVSS vector (8.8) says user interaction is required. No exploitation reported, not in KEV.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

Run winver or [System.Environment]::OSVersion and compare the build with the fixed builds. Affected means below: Win10 1607 / Server 2016 10.0.14393.9612; Win10 1809 / Server 2019 10.0.17763.9376; Win10 21H2 and 22H2 10.0.19044.7807 / 10.0.19045.7807; Win11 23H2 10.0.22631.7652; Win11 24H2 and Server 2025 10.0.26100.9711 (Server 2025: 10.0.26100.33650); Win11 25H2 10.0.26200.9711; Win11 26H1 10.0.28000.3231; Win11 26H2 10.0.26300.9711; Server 2022 10.0.20348.5761; Server 2012 6.2.9200.26434; Server 2012 R2 6.3.9600.23470. Source is CNA data via OpenCVE; confirm in the MSRC guide.

## Fix

Install the November 2026 Windows cumulative update that brings the OS to the build listed for your version (see how-to-check). Fixed builds are from CNA data mirrored on OpenCVE and are unconfirmed against the MSRC page.

## Timeline

- 2026-11-10T19:25:18+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-85838
- 2026-11-10T21:08:36+00:00 analyst https://app.opencve.io/cve/CVE-2026-85838 — MSRC page is JS-only and unreadable; affected builds taken from CNA data mirrored on OpenCVE (not primary, nothing verified). Vector AV:N/PR:N/UI:R: user interaction required. Not exploited, no PoC found.

## Documents

- [describes] OpenCVE: CVE-2026-85838 (mirrors Microsoft CNA data) https://app.opencve.io/cve/CVE-2026-85838

## From the sources

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_