CVE-2026-54116

Microsoft · Published July 14, 2026

6.5

CVSS v3.1

MEDIUM

Patch availableGet patch

Description

Microsoft SQL Server Information Disclosure Vulnerability. Access of resource using incompatible type ('type confusion') in SQL Server allows an authorized attacker to disclose information over a network.

Affected Products

Microsoft SQL Server 2025 for x64-based Systems (GDR)
Microsoft SQL Server 2025 for x64-based Systems (CU6)

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N