Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Microsoft SQL Server 2019 (CU 28)Microsoft SQL Server Elevation of Privilege Vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-37980

Microsoft SQL Server 2019 (CU 28)Microsoft SQL Server Elevation of Privilege Vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-37341

Microsoft SQL Server 2022Microsoft SQL Server Remote Code Execution Vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-54118

Microsoft SQL Server 2025Microsoft SQL Server Remote Code Execution Vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-54117

Microsoft SQL Server 2017 (CU 31)SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Risk 77
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

First published (updated )
CVE-2024-28928

Microsoft SQL Server 2019 (CU 27)SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Risk 77
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

First published (updated )
CVE-2024-21425

Microsoft SQL Server 2019 (CU 27)SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Risk 77
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

First published (updated )
CVE-2024-21333

Microsoft SQL Server 2017 (CU 31)SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Risk 77
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

First published (updated )
CVE-2024-21331

Microsoft SQL Server 2017 (CU 31)SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Risk 77
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

First published (updated )
CVE-2024-21415

Microsoft SQL Server 2017 (CU 31)SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Risk 77
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

First published (updated )
CVE-2024-21317

Microsoft SQL Server 2019 (CU 27)SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Risk 77
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

First published (updated )
CVE-2024-21332

Microsoft SQL Server 2017 (CU 31)SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Risk 77
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

First published (updated )
CVE-2024-21373

Microsoft SQL Server 2017 (CU 31)SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Risk 77
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

First published (updated )
CVE-2024-21335

Microsoft SQL Server 2019 (CU 27)SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Risk 77
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

First published (updated )
CVE-2024-21414

Microsoft SQL Server 2019 (CU 27)SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Risk 77
Severity
8.8
Integer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

First published (updated )
CVE-2024-21428

Microsoft SQL Server 2017 (CU 31)SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Risk 77
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

First published (updated )
CVE-2024-21308

Microsoft SQL Server 2019 (CU 27)SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Risk 77
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

First published (updated )
CVE-2024-21398

Microsoft Sql 2016 Azure Connect Feature PackMicrosoft SQL Server Native Scoring Remote Code Execution Vulnerability

Risk 79
Severity
8.8
Use After Free
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

First published (updated )
CVE-2024-26186

Microsoft Sql 2016 Azure Connect Feature PackMicrosoft SQL Server Native Scoring Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

First published (updated )
CVE-2024-26191

Microsoft Sql 2016 Azure Connect Feature PackMicrosoft SQL Server Native Scoring Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

First published (updated )
CVE-2024-37338

Microsoft Sql 2016 Azure Connect Feature PackMicrosoft SQL Server Native Scoring Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

First published (updated )
CVE-2024-37340

Microsoft Sql 2016 Azure Connect Feature PackMicrosoft SQL Server Native Scoring Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

First published (updated )
CVE-2024-37339

Microsoft Sql 2016 Azure Connect Feature PackMicrosoft SQL Server Native Scoring Remote Code Execution Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

First published (updated )
CVE-2024-37335

Microsoft SQL Server 2016Microsoft SQL Server Elevation of Privilege Vulnerability

Risk 79
Severity
8.8
Input Validation
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft SQL Server Elevation of Privilege Vulnerability

First published (updated )
CVE-2024-37965

Microsoft SQL Server 2022Microsoft SQL Server Elevation of Privilege Vulnerability

Risk 79
Severity
8.8
SQL Injection
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2025-47954

Microsoft SQL Server 2022 (CU 20)Microsoft SQL Server Elevation of Privilege Vulnerability

Risk 79
Severity
8.8
SQL Injection
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2025-49759

Microsoft SQL Server 2019 (CU 32)Microsoft SQL Server Elevation of Privilege Vulnerability

Risk 79
Severity
8.8
SQL Injection
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2025-49758

Microsoft SQL Server 2019 (CU 32)Microsoft SQL Server Elevation of Privilege Vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2025-24999

Microsoft SQL Server 2019 (CU 32)Microsoft SQL Server Elevation of Privilege Vulnerability

Risk 79
Severity
8.8
SQL Injection
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2025-53727

Microsoft SQL Server 2022Microsoft SQL Server Elevation of Privilege Vulnerability

Risk 79
Severity
8.8
Command Injection
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2025-55227

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203