Integer Overflow in Microsoft SQL Server

Publication date: 2026-09-08

Last updated on: 2026-09-15

Assigner: Microsoft Corporation

Description

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-15

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-67641

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	sql_server_2022	to 16.0.1200.5 (exc)
microsoft	sql_server_2022	From 16.0.4003.1 (inc) to 16.0.4275.2 (exc)
microsoft	sql_server_2025	to 17.0.1135.8 (exc)
microsoft	sql_server_2025	From 17.0.4006.2 (inc) to 17.0.4085.5 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-190	The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Attack-Flow Graph

Executive Summary

This is an integer overflow or wraparound vulnerability in Microsoft SQL Server. An authorized attacker can exploit it to cause a denial of service over a network by triggering an overflow condition.

Impact Analysis

An attacker could exploit this to crash SQL Server instances, leading to service disruption and potential data unavailability for users and applications relying on the database.

Mitigation Strategies

Apply the latest security updates from Microsoft for SQL Server to patch the integer overflow issue. Monitor network traffic for unusual SQL Server service disruptions and restrict unauthorized access to the database service.

Hi! I’m here to help you understand CVE-2026-67641. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70