SQL 2016 Azure Connect Feature Pack
by Microsoft
CVEs (97)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-26115 | Hig | 0.57 | 8.8 | 0.01 | Mar 10, 2026 | Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-21262 | Hig | 0.57 | 8.8 | 0.02 | Mar 10, 2026 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2025-59499 | Hig | 0.57 | 8.8 | 0.01 | Nov 11, 2025 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2025-55227 | Hig | 0.57 | 8.8 | 0.01 | Sep 9, 2025 | Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2025-53727 | Hig | 0.57 | 8.8 | 0.01 | Aug 12, 2025 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2025-49759 | Hig | 0.57 | 8.8 | 0.01 | Aug 12, 2025 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2025-49758 | Hig | 0.57 | 8.8 | 0.01 | Aug 12, 2025 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2025-24999 | Hig | 0.57 | 8.8 | 0.02 | Aug 12, 2025 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2024-49018 | Hig | 0.57 | 8.8 | 0.02 | Nov 12, 2024 | SQL Server Native Client Remote Code Execution Vulnerability | ||
| CVE-2024-49017 | Hig | 0.57 | 8.8 | 0.01 | Nov 12, 2024 | SQL Server Native Client Remote Code Execution Vulnerability | ||
| CVE-2024-49016 | Hig | 0.57 | 8.8 | 0.01 | Nov 12, 2024 | SQL Server Native Client Remote Code Execution Vulnerability | ||
| CVE-2024-49015 | Hig | 0.57 | 8.8 | 0.01 | Nov 12, 2024 | SQL Server Native Client Remote Code Execution Vulnerability | ||
| CVE-2024-49014 | Hig | 0.57 | 8.8 | 0.01 | Nov 12, 2024 | SQL Server Native Client Remote Code Execution Vulnerability | ||
| CVE-2024-49013 | Hig | 0.57 | 8.8 | 0.01 | Nov 12, 2024 | SQL Server Native Client Remote Code Execution Vulnerability | ||
| CVE-2024-49012 | Hig | 0.57 | 8.8 | 0.01 | Nov 12, 2024 | SQL Server Native Client Remote Code Execution Vulnerability | ||
| CVE-2024-49011 | Hig | 0.57 | 8.8 | 0.01 | Nov 12, 2024 | SQL Server Native Client Remote Code Execution Vulnerability | ||
| CVE-2024-49010 | Hig | 0.57 | 8.8 | 0.01 | Nov 12, 2024 | SQL Server Native Client Remote Code Execution Vulnerability | ||
| CVE-2024-49009 | Hig | 0.57 | 8.8 | 0.01 | Nov 12, 2024 | SQL Server Native Client Remote Code Execution Vulnerability | ||
| CVE-2024-49008 | Hig | 0.57 | 8.8 | 0.01 | Nov 12, 2024 | SQL Server Native Client Remote Code Execution Vulnerability | ||
| CVE-2024-49007 | Hig | 0.57 | 8.8 | 0.01 | Nov 12, 2024 | SQL Server Native Client Remote Code Execution Vulnerability |
- risk 0.57cvss 8.8epss 0.01
Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.02
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.02
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.02
SQL Server Native Client Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
SQL Server Native Client Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
SQL Server Native Client Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
SQL Server Native Client Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
SQL Server Native Client Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
SQL Server Native Client Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
SQL Server Native Client Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
SQL Server Native Client Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
SQL Server Native Client Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
SQL Server Native Client Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
SQL Server Native Client Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
SQL Server Native Client Remote Code Execution Vulnerability
Page 1 of 5