VYPR
← All advisories
High severity8.8CISA KEVNVD Advisory· Published Jul 15, 2019· Updated Aug 27, 2026

CVE-2019-1068

CVE-2019-1068

Description

A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

16
  • Microsoft/Project Servercpe-rescue
    Range: 2014 Service Pack 2 for 32-bit Systems (CU)
  • Microsoft/SQL Serverllm-fuzzy6 versions
    (expand)+ 5 more
    • (no CPE)
    • cpe:2.3:a:microsoft:sql_server:2014:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:2016:sp1:*:*:*:*:x64:*
    • cpe:2.3:a:microsoft:sql_server:2016:sp2:*:*:*:*:x64:*
    • cpe:2.3:a:microsoft:sql_server:2017:*:*:*:*:*:x64:*
  • Microsoft/Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR)v5
    Range: unspecified
  • Microsoft/Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR)v5
    Range: unspecified
  • Microsoft/Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR)v5
    Range: unspecified
  • Microsoft/Microsoft SQL Server 2017 for x64-based Systems (GDR)v5
    Range: unspecified
  • Microsoft/Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)v5
    Range: unspecified
  • Microsoft/Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)v5
    Range: unspecified
  • Microsoft/Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)v5
    Range: unspecified
  • Microsoft/Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)v5
    Range: unspecified
  • Microsoft/Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU)v5
    Range: unspecified

Patches

Vulnerability mechanics

References

2

News mentions

6