Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2026-62903

Microsoft.Data.SqlClient Information Disclosure Vulnerability

Description

Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Microsoft.Data.SqlClient 6.1

  • 1.0.0.0 to < 6.1.7affected

Microsoft Microsoft.Data.SqlClient 7.0

  • 1.0.0.0 to < 7.0.3affected

Microsoft Microsoft.Data.SqlClient 7.1

  • 1.0.0.0 to < 7.1.0-preview3affected

References