Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-88084

Microsoft SQL Server Denial of Service Vulnerability

Description

Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Microsoft SQL Server 2019 (GDR)

  • 15.0.0 to < 15.0.2200.2affected

Microsoft Microsoft SQL Server 2019 for x64-based Systems (CU32)

  • 15.0.4003.23 to < 15.0.4500.2affected

Microsoft Microsoft SQL Server 2025 (CU8)

  • -affected

References