Where
-Infinity
0

Trending

Last week
Last month
Last year

Microsoft SQL Server 2022 (CU 25)Microsoft SQL Server Elevation of Privilege Vulnerability

Risk 79
Severity
8.8
SQL Injection
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-47295

Microsoft SQL Server 2022Microsoft SQL Server Elevation of Privilege Vulnerability

Risk 79
Severity
8.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

External control of file name or path in SQL Server allows an authorized attacker to elevate privileges locally.

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-55002

Microsoft SQL Server 2022Microsoft SQL Server Remote Code Execution Vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-54118

Microsoft SQL Server 2025Microsoft SQL Server Remote Code Execution Vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-54117

Microsoft SQL Server 2019 (CU 32)Microsoft SQL Server Elevation of Privilege Vulnerability

Risk 70
Severity
7.5
SQL Injection
AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-47296

Microsoft SQL ServerMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Risk 68
Severity
7.8
Integer Underflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21718

Microsoft SQL ServerMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Risk 69
Severity
7.8
Integer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21704

Microsoft SQL ServerMicrosoft SQL Server Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21713

Microsoft SQL ServerMicrosoft SQL Server Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21705

Microsoft SQL ServerMicrosoft SQL Server Remote Code Execution Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21528

Microsoft SQL Server 2022SQL Server Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
SQL Injection
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-32176

Microsoft SQL Server 2016Microsoft SQL Server Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Remote Code Execution Vulnerability

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-33120

Microsoft SQL Server 2016SQL Server Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
SQL Injection
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-32167

Microsoft SQL Server 2017Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

Risk 48
Severity
7.1
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

First published (updated )
CVE-2024-37966

Microsoft Sql 2016 Azure Connect Feature PackMicrosoft SQL Server Native Scoring Information Disclosure Vulnerability

Risk 48
Severity
7.1
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

First published (updated )
CVE-2024-37342

Microsoft SQL Server 2019 (CU 28)Microsoft SQL Server Elevation of Privilege Vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-37980

Microsoft SQL Server 2016Microsoft SQL Server Elevation of Privilege Vulnerability

Risk 79
Severity
8.8
Input Validation
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-37965

Microsoft Sql 2016 Azure Connect Feature PackMicrosoft SQL Server Native Scoring Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

First published (updated )
CVE-2024-37338

Microsoft SQL Server 2019 (CU 28)Microsoft SQL Server Elevation of Privilege Vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-37341

Microsoft Sql 2016 Azure Connect Feature PackMicrosoft SQL Server Native Scoring Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

First published (updated )
CVE-2024-37340

Microsoft Sql 2016 Azure Connect Feature PackMicrosoft SQL Server Native Scoring Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

First published (updated )
CVE-2024-37339

Microsoft Sql 2016 Azure Connect Feature PackMicrosoft SQL Server Native Scoring Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

First published (updated )
CVE-2024-37335

Microsoft Sql 2016 Azure Connect Feature PackMicrosoft SQL Server Native Scoring Information Disclosure Vulnerability

Risk 48
Severity
7.1
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C

Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

First published (updated )
CVE-2024-37337

Microsoft Sql 2016 Azure Connect Feature PackMicrosoft SQL Server Native Scoring Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

First published (updated )
CVE-2024-26191

Microsoft Sql 2016 Azure Connect Feature PackMicrosoft SQL Server Native Scoring Remote Code Execution Vulnerability

Risk 79
Severity
8.8
Use After Free
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

First published (updated )
CVE-2024-26186

Microsoft SQL Server 2016SQL Server Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-40370

Microsoft SQL Server 2022Microsoft SQL Server Elevation of Privilege Vulnerability

Risk 49
Severity
7.2
EPSS
0.09%
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Elevation of Privilege Vulnerability

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-20803

Microsoft SQL ServerSQL Server Elevation of Privilege Vulnerability

Risk 84
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-21262

Microsoft SQL Server 2025SQL Server Elevation of Privilege Vulnerability

Risk 79
Severity
8.8
SQL Injection
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-26116

Microsoft SQL Server 2016 Azure Connect Feature PackSQL Server Elevation of Privilege Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-26115

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203