CVE-2026-33120

No fix known EPSS <1%CVSS 8.8

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.

Published 2026-04-14 · CVE record · OSV

Products: Microsoft SQL Server 2022 (GDR)