Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Sql Server 2017
Total 135 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-67376 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-16 N/A 7.5 HIGH
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
CVE-2026-67370 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-16 N/A 8.8 HIGH
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66820 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-16 N/A 8.8 HIGH
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66819 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-16 N/A 8.8 HIGH
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66818 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-16 N/A 8.8 HIGH
Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66814 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-16 N/A 8.8 HIGH
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-68787 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-15 N/A 7.8 HIGH
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
CVE-2026-68786 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-15 N/A 8.8 HIGH
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-68785 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-15 N/A 4.9 MEDIUM
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-68784 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-15 N/A 6.5 MEDIUM
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68781 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-15 N/A 6.5 MEDIUM
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68780 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-15 N/A 6.5 MEDIUM
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68779 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-15 N/A 6.5 MEDIUM
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68778 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-15 N/A 6.5 MEDIUM
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68777 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-15 N/A 6.5 MEDIUM
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68776 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-15 N/A 6.5 MEDIUM
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68775 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-15 N/A 8.8 HIGH
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67648 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-15 N/A 6.5 MEDIUM
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67645 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-15 N/A 6.5 MEDIUM
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67639 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-15 N/A 8.8 HIGH
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.