SS
Product
Sql Server 2016
by Microsoft · last CVE Jul 14, 2026
On CISA KEVExploited in the wild
100
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 93Medium 3Low 0
Watch

Add Sql Server 2016 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-47997
5.3
1%
Sep 9
Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network
Affected: 13.0.6300.2 before 13.0.6470.1; 13.0.7000.253 before 13.0.7065.1
CVE-2024-37342
4.3
2%
Sep 10
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
Affected: 13.0.6300.2 through 13.0.6441.1
CVE-2024-37337
4.3
2%
Sep 10
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
Affected: 13.0.6300.2 before 13.0.6441.1
Showing 3