The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
    (CVE-2026-77482)

  - Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a     network. (CVE-2026-77486)

  - Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a     network. (CVE-2026-78442)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
344796	Microsoft SQL Server (September 2026)	Nessus	Misc.	2026/9/11	2026/9/11	high
344798	Microsoft SQL Server (September 2026)	Nessus	Windows : Microsoft Bulletins	2026/9/11	2026/9/11	high

检测

插件搜索

high

high