SS
Product
Sql Server 2016
On CISA KEVExploited in the wild
100
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 93Medium 3Low 0
Watch
Add Sql Server 2016 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1068 In wildKEV | 8.8 | Jul 15 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: 13.0.4001.0 before 13.0.4259.0; 13.0.4411.0 before 13.0.4604.0; 13.0.5026.0 before 13.0.5101.9; 13.0.5149.0 before 13.0.5366.0 |
| CVE-2026-54118 | 9.8 | Jul 14 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6500.1; 13.0.7000.253 before 13.0.7095.1 |
| CVE-2026-54117 | 9.8 | Jul 14 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6500.1; 13.0.7000.253 before 13.0.7095.1 |
| CVE-2024-37980 | 9.8 | Sep 10 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 13.0.6300.2 before 13.0.6445.1; 13.0.7000.253 before 13.0.7040.1 |
| CVE-2024-37341 | 9.8 | Sep 10 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1 |
| CVE-2026-47295 | 8.8 | Jul 14 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 13.0.6300.2 before 13.0.6500.1; 13.0.7000.253 before 13.0.7095.1 |
| CVE-2026-55002 | 8.8 | Jul 14 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 13.0.6300.2 before 13.0.6500.1; 13.0.7000.253 before 13.0.7095.1 |
| CVE-2026-40370 | 8.8 | May 12 | SQL Server Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6490.1; 13.0.7000.253 before 13.0.7085.1 |
| CVE-2026-33120 | 8.8 | Apr 14 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6485.1; 13.0.7000.253 before 13.0.7080.1 |
| CVE-2026-26116 | 8.8 | Mar 10 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 13.0.6300.2 before 13.0.6480.4; 13.0.7000.253 before 13.0.7075.5 |
| CVE-2026-26115 | 8.8 | Mar 10 | Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 13.0.6300.2 before 13.0.6480.4; 13.0.7000.253 before 13.0.7075.5 |
| CVE-2026-21262 | 8.8 | Mar 10 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 13.0.6300.2 before 13.0.6480.4; 13.0.7000.253 before 13.0.7075.5 |
| CVE-2025-59499 | 8.8 | Nov 11 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 13.0.6300.2 before 13.0.6475.1; 13.0.7000.253 before 13.0.7070.1 |
| CVE-2025-55227 | 8.8 | Sep 9 | Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 13.0.6300.2 before 13.0.6470.1; 13.0.7000.253 before 13.0.7065.1 |
| CVE-2025-53727 | 8.8 | Aug 12 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 13.0.6300.2 before 13.0.6465.1; 13.0.7000.253 before 13.0.7060.1 |
| CVE-2025-49759 | 8.8 | Aug 12 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 13.0.6300.2 before 13.0.6465.1; 13.0.7000.253 before 13.0.7060.1 |
| CVE-2025-49758 | 8.8 | Aug 12 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 13.0.6300.2 before 13.0.6465.1; 13.0.7000.253 before 13.0.7060.1 |
| CVE-2025-24999 | 8.8 | Aug 12 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 13.0.6300.2 before 13.0.6465.1; 13.0.7000.253 before 13.0.7060.1 |
| CVE-2024-49018 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-49017 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-49016 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-49015 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-49014 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-49013 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-49012 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-49011 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-49010 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-49009 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-49008 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-49007 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-49006 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-49005 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-49004 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-49003 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-49002 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-49001 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-49000 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-48999 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-48998 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-48997 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-48996 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-48995 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-48994 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-48993 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-43462 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-43459 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-38255 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-37965 | 8.8 | Sep 10 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 13.0.6300.2 before 13.0.6445.1; 13.0.7000.253 before 13.0.7040.1 |
| CVE-2024-26191 | 8.8 | Sep 10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1 |
| CVE-2024-26186 | 8.8 | Sep 10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1 |