SQL Server
by Microsoft
CVEs (321)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-49043 | Hig | 0.51 | 7.8 | 0.01 | Nov 12, 2024 | Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability | ||
| CVE-2024-49021 | Hig | 0.51 | 7.8 | 0.01 | Nov 12, 2024 | Microsoft SQL Server Remote Code Execution Vulnerability | ||
| CVE-2023-36785 | Hig | 0.51 | 7.8 | 0.01 | Oct 10, 2023 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2023-36730 | Hig | 0.51 | 7.8 | 0.01 | Oct 10, 2023 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2023-36420 | Hig | 0.51 | 7.8 | 0.01 | Oct 10, 2023 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2023-36417 | Hig | 0.51 | 7.8 | 0.01 | Oct 10, 2023 | Microsoft SQL OLE DB Remote Code Execution Vulnerability | ||
| CVE-2023-32028 | Hig | 0.51 | 7.8 | 0.01 | Jun 16, 2023 | Microsoft SQL OLE DB Remote Code Execution Vulnerability | ||
| CVE-2023-32027 | Hig | 0.51 | 7.8 | 0.01 | Jun 16, 2023 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2023-32026 | Hig | 0.51 | 7.8 | 0.01 | Jun 16, 2023 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2023-32025 | Hig | 0.51 | 7.8 | 0.01 | Jun 16, 2023 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2023-29356 | Hig | 0.51 | 7.8 | 0.01 | Jun 16, 2023 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2023-29349 | Hig | 0.51 | 7.8 | 0.01 | Jun 16, 2023 | Microsoft ODBC and OLE DB Remote Code Execution Vulnerability | ||
| CVE-2023-21718 | Hig | 0.51 | 7.8 | 0.01 | Feb 14, 2023 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2023-21704 | Hig | 0.51 | 7.8 | 0.00 | Feb 14, 2023 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2023-21528 | Hig | 0.51 | 7.8 | 0.00 | Feb 14, 2023 | Microsoft SQL Server Remote Code Execution Vulnerability | ||
| CVE-2022-23276 | Hig | 0.51 | 7.8 | 0.01 | Feb 9, 2022 | SQL Server for Linux Containers Elevation of Privilege Vulnerability | ||
| CVE-2025-49719 | Hig | 0.50 | 7.5 | 0.11 | Jul 8, 2025 | Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2024-43474 | Hig | 0.50 | 7.6 | 0.01 | Sep 10, 2024 | Microsoft SQL Server Information Disclosure Vulnerability | ||
| CVE-2026-67376 | Hig | 0.49 | 7.5 | 0.01 | Sep 8, 2026 | Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network. | ||
| CVE-2025-49718 | Hig | 0.49 | 7.5 | 0.03 | Jul 8, 2025 | Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network. |
- risk 0.51cvss 7.8epss 0.01
Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft SQL Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft SQL OLE DB Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft SQL OLE DB Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.00
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.00
Microsoft SQL Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
SQL Server for Linux Containers Elevation of Privilege Vulnerability
- risk 0.50cvss 7.5epss 0.11
Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.
- risk 0.50cvss 7.6epss 0.01
Microsoft SQL Server Information Disclosure Vulnerability
- risk 0.49cvss 7.5epss 0.01
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
- risk 0.49cvss 7.5epss 0.03
Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network.
Page 10 of 17