Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Sql Server 2019
Total 194 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-49759 1 Microsoft 4 Sql Server 2016, Sql Server 2017, Sql Server 2019 and 1 more 2026-06-17 N/A 8.8 HIGH
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2025-49758 1 Microsoft 4 Sql Server 2016, Sql Server 2017, Sql Server 2019 and 1 more 2026-06-17 N/A 8.8 HIGH
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2025-49719 1 Microsoft 4 Sql Server 2016, Sql Server 2017, Sql Server 2019 and 1 more 2026-06-17 N/A 7.5 HIGH
Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.
CVE-2025-49718 1 Microsoft 2 Sql Server 2019, Sql Server 2022 2026-06-17 N/A 7.5 HIGH
Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network.
CVE-2025-49717 1 Microsoft 2 Sql Server 2019, Sql Server 2022 2026-06-17 N/A 8.5 HIGH
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2025-47997 1 Microsoft 4 Sql Server 2016, Sql Server 2017, Sql Server 2019 and 1 more 2026-06-17 N/A 6.5 MEDIUM
Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2025-24999 1 Microsoft 4 Sql Server 2016, Sql Server 2017, Sql Server 2019 and 1 more 2026-06-17 N/A 8.8 HIGH
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2024-49043 1 Microsoft 4 Sql Server 2016, Sql Server 2017, Sql Server 2019 and 1 more 2026-06-17 N/A 7.8 HIGH
Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
CVE-2024-49021 1 Microsoft 4 Sql Server 2016, Sql Server 2017, Sql Server 2019 and 1 more 2026-06-17 N/A 7.8 HIGH
Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2024-49018 1 Microsoft 3 Sql Server 2016, Sql Server 2017, Sql Server 2019 2026-06-17 N/A 8.8 HIGH
SQL Server Native Client Remote Code Execution Vulnerability
CVE-2024-49017 1 Microsoft 3 Sql Server 2016, Sql Server 2017, Sql Server 2019 2026-06-17 N/A 8.8 HIGH
SQL Server Native Client Remote Code Execution Vulnerability
CVE-2024-49016 1 Microsoft 3 Sql Server 2016, Sql Server 2017, Sql Server 2019 2026-06-17 N/A 8.8 HIGH
SQL Server Native Client Remote Code Execution Vulnerability
CVE-2024-49015 1 Microsoft 3 Sql Server 2016, Sql Server 2017, Sql Server 2019 2026-06-17 N/A 8.8 HIGH
SQL Server Native Client Remote Code Execution Vulnerability
CVE-2024-49014 1 Microsoft 3 Sql Server 2016, Sql Server 2017, Sql Server 2019 2026-06-17 N/A 8.8 HIGH
SQL Server Native Client Remote Code Execution Vulnerability
CVE-2024-49013 1 Microsoft 3 Sql Server 2016, Sql Server 2017, Sql Server 2019 2026-06-17 N/A 8.8 HIGH
SQL Server Native Client Remote Code Execution Vulnerability
CVE-2024-49012 1 Microsoft 3 Sql Server 2016, Sql Server 2017, Sql Server 2019 2026-06-17 N/A 8.8 HIGH
SQL Server Native Client Remote Code Execution Vulnerability
CVE-2024-49011 1 Microsoft 3 Sql Server 2016, Sql Server 2017, Sql Server 2019 2026-06-17 N/A 8.8 HIGH
SQL Server Native Client Remote Code Execution Vulnerability
CVE-2024-49010 1 Microsoft 3 Sql Server 2016, Sql Server 2017, Sql Server 2019 2026-06-17 N/A 8.8 HIGH
SQL Server Native Client Remote Code Execution Vulnerability
CVE-2024-49009 1 Microsoft 3 Sql Server 2016, Sql Server 2017, Sql Server 2019 2026-06-17 N/A 8.8 HIGH
SQL Server Native Client Remote Code Execution Vulnerability
CVE-2024-49008 1 Microsoft 3 Sql Server 2016, Sql Server 2017, Sql Server 2019 2026-06-17 N/A 8.8 HIGH
SQL Server Native Client Remote Code Execution Vulnerability