SS
Product
Sql Server 2016
On CISA KEVExploited in the wild
100
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 93Medium 3Low 0
Watch
Add Sql Server 2016 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-37339 | 8.8 | Sep 10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1 |
| CVE-2024-37340 | 8.8 | Sep 10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1 |
| CVE-2024-37335 | 8.8 | Sep 10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1 |
| CVE-2024-37338 | 8.8 | Sep 10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1 |
| CVE-2024-38088 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-38087 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-37336 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-37333 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-37332 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-37331 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-37330 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-37329 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-37328 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-37327 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-37326 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-37324 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-37323 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-37322 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-37321 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-37320 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-37319 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-37318 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-35272 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-35271 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-35256 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-28928 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-21449 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-21428 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-21425 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-21415 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-21414 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-21398 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-21373 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-21335 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-21333 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-21332 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-21331 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-21317 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-21308 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1; 13.0.7000.253 before 13.0.7037.1 |
| CVE-2024-21303 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 13.0.0.0 through 13.0.6441.1; 13.0.6441.2 through 13.0.7037.1; 13.0.6441.1; 13.0.6441.1; 13.0.7037.1; 13.0.7037.1 |
| CVE-2024-20701 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 13.0.6441.1; 13.0.7037.1 |
| CVE-2026-32176 | 7.8 | Apr 14 | SQL Server Elevation of Privilege Vulnerability Affected: 13.0.6300.2 before 13.0.6485.1; 13.0.7000.253 before 13.0.7080.1 |
| CVE-2026-32167 | 7.8 | Apr 14 | SQL Server Elevation of Privilege Vulnerability Affected: 13.0.6300.2 before 13.0.6485.1; 13.0.7000.253 before 13.0.7080.1 |
| CVE-2024-49043 | 7.8 | Nov 12 | Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2024-49021 | 7.8 | Nov 12 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2 |
| CVE-2026-47296 | 7.5 | Jul 14 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 13.0.6300.2 before 13.0.6500.1; 13.0.7000.253 before 13.0.7095.1 |
| CVE-2025-49719 | 7.5 | Jul 8 | Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network Affected: 13.0.6300.2 before 13.0.6460.7; 13.0.7000.253 before 13.0.7055.9 |
| CVE-2025-47997 | 5.3 | Sep 9 | Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network Affected: 13.0.6300.2 before 13.0.6470.1; 13.0.7000.253 before 13.0.7065.1 |
| CVE-2024-37342 | 4.3 | Sep 10 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability Affected: 13.0.6300.2 through 13.0.6441.1 |
| CVE-2024-37337 | 4.3 | Sep 10 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability Affected: 13.0.6300.2 before 13.0.6441.1 |