VYPR
← All advisories
High severity8.8NVD Advisory· Published Jul 15, 2019· Updated Jun 17, 2026

CVE-2019-1068

CVE-2019-1068

Description

A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.

Affected products

16
  • Microsoft/SQL Server6 versions
    cpe:2.3:a:microsoft:sql_server:2014:sp2:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:microsoft:sql_server:2014:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:2016:sp1:*:*:*:*:x64:*
    • cpe:2.3:a:microsoft:sql_server:2016:sp2:*:*:*:*:x64:*
    • cpe:2.3:a:microsoft:sql_server:2017:*:*:*:*:*:x64:*
    • (no CPE)
  • Microsoft/Project Servercpe-rescue
    Range: 2014 Service Pack 2 for 32-bit Systems (CU)
  • Microsoft/Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR)v5
    Range: unspecified
  • Microsoft/Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR)v5
    Range: unspecified
  • Microsoft/Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU)v5
    Range: unspecified
  • Microsoft/Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)v5
    Range: unspecified
  • Microsoft/Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)v5
    Range: unspecified
  • Microsoft/Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)v5
    Range: unspecified
  • Microsoft/Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR)v5
    Range: unspecified
  • Microsoft/Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)v5
    Range: unspecified
  • Microsoft/Microsoft SQL Server 2017 for x64-based Systems (GDR)v5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.