SS
Product
Sql Server 2016
by Microsoft · last CVE Jul 14, 2026
On CISA KEVExploited in the wild
100
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 93Medium 3Low 0
Watch

Add Sql Server 2016 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-1068
In wildKEV
8.8
57%
Jul 15
Microsoft SQL Server Remote Code Execution Vulnerability
Affected: 13.0.4001.0 before 13.0.4259.0; 13.0.4411.0 before 13.0.4604.0; 13.0.5026.0 before 13.0.5101.9; 13.0.5149.0 before 13.0.5366.0
CVE-2026-47295
8.8
1%
Jul 14
Microsoft SQL Server Elevation of Privilege Vulnerability
Affected: 13.0.6300.2 before 13.0.6500.1; 13.0.7000.253 before 13.0.7095.1
CVE-2026-55002
8.8
1%
Jul 14
Microsoft SQL Server Elevation of Privilege Vulnerability
Affected: 13.0.6300.2 before 13.0.6500.1; 13.0.7000.253 before 13.0.7095.1
CVE-2026-40370
8.8
1%
May 12
SQL Server Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6490.1; 13.0.7000.253 before 13.0.7085.1
CVE-2026-33120
8.8
1%
Apr 14
Microsoft SQL Server Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6485.1; 13.0.7000.253 before 13.0.7080.1
CVE-2026-26116
8.8
1%
Mar 10
SQL Server Elevation of Privilege Vulnerability
Affected: 13.0.6300.2 before 13.0.6480.4; 13.0.7000.253 before 13.0.7075.5
CVE-2026-26115
8.8
1%
Mar 10
SQL Server Elevation of Privilege Vulnerability
Affected: 13.0.6300.2 before 13.0.6480.4; 13.0.7000.253 before 13.0.7075.5
CVE-2026-21262
8.8
2%
Mar 10
SQL Server Elevation of Privilege Vulnerability
Affected: 13.0.6300.2 before 13.0.6480.4; 13.0.7000.253 before 13.0.7075.5
CVE-2025-59499
8.8
1%
Nov 11
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network
Affected: 13.0.6300.2 before 13.0.6475.1; 13.0.7000.253 before 13.0.7070.1
CVE-2025-55227
8.8
1%
Sep 9
Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network
Affected: 13.0.6300.2 before 13.0.6470.1; 13.0.7000.253 before 13.0.7065.1
CVE-2025-53727
8.8
1%
Aug 12
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network
Affected: 13.0.6300.2 before 13.0.6465.1; 13.0.7000.253 before 13.0.7060.1
CVE-2025-49759
8.8
1%
Aug 12
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network
Affected: 13.0.6300.2 before 13.0.6465.1; 13.0.7000.253 before 13.0.7060.1
CVE-2025-49758
8.8
1%
Aug 12
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network
Affected: 13.0.6300.2 before 13.0.6465.1; 13.0.7000.253 before 13.0.7060.1
CVE-2025-24999
8.8
2%
Aug 12
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network
Affected: 13.0.6300.2 before 13.0.6465.1; 13.0.7000.253 before 13.0.7060.1
CVE-2024-49018
8.8
2%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-49017
8.8
1%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-49016
8.8
1%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-49015
8.8
1%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-49014
8.8
1%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-49013
8.8
1%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-49012
8.8
1%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-49011
8.8
1%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-49010
8.8
1%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-49009
8.8
1%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-49008
8.8
1%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-49007
8.8
1%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-49006
8.8
1%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-49005
8.8
2%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-49004
8.8
2%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-49003
8.8
2%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-49002
8.8
2%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-49001
8.8
2%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-49000
8.8
2%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-48999
8.8
1%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-48998
8.8
1%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-48997
8.8
1%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-48996
8.8
2%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-48995
8.8
2%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-48994
8.8
2%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-48993
8.8
2%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-43462
8.8
2%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-43459
8.8
2%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-38255
8.8
2%
Nov 12
SQL Server Native Client Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6455.2; 13.0.7000.253 before 13.0.7050.2
CVE-2024-37965
8.8
2%
Sep 10
Microsoft SQL Server Elevation of Privilege Vulnerability
Affected: 13.0.6300.2 before 13.0.6445.1; 13.0.7000.253 before 13.0.7040.1
CVE-2024-26191
8.8
2%
Sep 10
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6441.1
CVE-2024-26186
8.8
2%
Sep 10
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6441.1
CVE-2024-37339
8.8
2%
Sep 10
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6441.1
CVE-2024-37340
8.8
2%
Sep 10
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6441.1
CVE-2024-37335
8.8
2%
Sep 10
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6441.1
CVE-2024-37338
8.8
2%
Sep 10
Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
Affected: 13.0.6300.2 before 13.0.6441.1
Page 1 of 2 · 93 total