{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Microsoft SQL Server 2019 (GDR): all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/microsoft--microsoft-sql-server-2019-gdr/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/microsoft--microsoft-sql-server-2019-gdr/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-94520/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-94520/",
   "title": "CVE-2026-94520 · Microsoft SQL Server 2017 (GDR) · disclosed",
   "content_text": "Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.",
   "date_published": "2026-10-13T20:37:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-94512/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-94512/",
   "title": "CVE-2026-94512 · Microsoft SQL Server 2017 (GDR) · disclosed",
   "content_text": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.",
   "date_published": "2026-10-13T20:37:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88089/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88089/",
   "title": "CVE-2026-88089 · Microsoft SQL Server 2017 (GDR) · disclosed",
   "content_text": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.",
   "date_published": "2026-10-13T20:37:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88085/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88085/",
   "title": "CVE-2026-88085 · Microsoft SQL Server 2017 (GDR) · disclosed",
   "content_text": "Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.",
   "date_published": "2026-10-13T20:37:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88088/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88088/",
   "title": "CVE-2026-88088 · Microsoft SQL Server 2019 (GDR) · disclosed",
   "content_text": "Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.",
   "date_published": "2026-10-13T20:37:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85919/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85919/",
   "title": "CVE-2026-85919 · Microsoft SQL Server 2019 (GDR) · disclosed",
   "content_text": "Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.",
   "date_published": "2026-10-13T20:37:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88086/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88086/",
   "title": "CVE-2026-88086 · Microsoft SQL Server 2019 (GDR) · disclosed",
   "content_text": "Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.",
   "date_published": "2026-10-13T20:37:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88084/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88084/",
   "title": "CVE-2026-88084 · Microsoft SQL Server 2019 (GDR) · disclosed",
   "content_text": "Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.",
   "date_published": "2026-10-13T20:37:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85888/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85888/",
   "title": "CVE-2026-85888 · Microsoft SQL Server 2017 (GDR) · disclosed",
   "content_text": "Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.",
   "date_published": "2026-10-13T20:37:22Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88081/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88081/",
   "title": "CVE-2026-88081 · Microsoft SQL Server 2017 (GDR) · disclosed",
   "content_text": "Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.",
   "date_published": "2026-10-13T20:37:22Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88082/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88082/",
   "title": "CVE-2026-88082 · Microsoft SQL Server 2019 (GDR) · disclosed",
   "content_text": "Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.",
   "date_published": "2026-10-13T20:37:22Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-67628/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-67628/",
   "title": "CVE-2026-67628 · Microsoft SQL Server 2017 (GDR) · disclosed",
   "content_text": "Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.",
   "date_published": "2026-10-13T20:37:01Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-65674/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-65674/",
   "title": "CVE-2026-65674 · Microsoft SQL Server 2019 (GDR) · disclosed",
   "content_text": "Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.",
   "date_published": "2026-10-13T20:37:01Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85886/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85886/",
   "title": "CVE-2026-85886 · Microsoft SQL Server 2017 (GDR) · disclosed",
   "content_text": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.",
   "date_published": "2026-10-13T20:36:36Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85876/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85876/",
   "title": "CVE-2026-85876 · Microsoft SQL Server 2019 (GDR) · disclosed",
   "content_text": "Use after free in SQL Server allows an authorized attacker to elevate privileges locally.",
   "date_published": "2026-10-13T20:36:36Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70189/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70189/",
   "title": "CVE-2026-70189 · Microsoft SQL Server 2017 (GDR) · disclosed",
   "content_text": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.",
   "date_published": "2026-10-13T20:36:36Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-68883/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-68883/",
   "title": "CVE-2026-68883 · Microsoft SQL Server 2017 (GDR) · disclosed",
   "content_text": "Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T20:36:36Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-67625/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-67625/",
   "title": "CVE-2026-67625 · Microsoft SQL Server 2017 (GDR) · disclosed",
   "content_text": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.",
   "date_published": "2026-10-13T20:36:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96956/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96956/",
   "title": "CVE-2026-96956 · Microsoft SQL Server 2017 (GDR) · disclosed",
   "content_text": "Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T20:35:45Z"
  }
 ]
}