Microsoft Security Response Center Follow CVE-2026-67636 Microsoft SQL Server Remote Code Execution Vulnerability Out-of-bounds read in SQL Server allows an authorized attacker to execute code over a network. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67636 msrc.microsoft.com