SS
Product
Sql Server 2017
by Microsoft · last CVE Sep 8, 2026
On CISA KEVExploited in the wild
147
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 120Medium 22Low 0
Watch

Add Sql Server 2017 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-21428
8.8
2%
Jul 9
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Affected: 14.0.1000.169 before 14.0.2056.2; 14.0.3006.16 before 14.0.3471.2
CVE-2024-21425
8.8
2%
Jul 9
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Affected: 14.0.1000.169 before 14.0.2056.2; 14.0.3006.16 before 14.0.3471.2
CVE-2024-21415
8.8
2%
Jul 9
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Affected: 14.0.1000.169 before 14.0.2056.2; 14.0.3006.16 before 14.0.3471.2
CVE-2024-21414
8.8
2%
Jul 9
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Affected: 14.0.1000.169 before 14.0.2056.2; 14.0.3006.16 before 14.0.3471.2
CVE-2024-21398
8.8
2%
Jul 9
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Affected: 14.0.1000.169 before 14.0.2056.2; 14.0.3006.16 before 14.0.3471.2
CVE-2024-21373
8.8
2%
Jul 9
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Affected: 14.0.1000.169 before 14.0.2056.2; 14.0.3006.16 before 14.0.3471.2
CVE-2024-21335
8.8
2%
Jul 9
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Affected: 14.0.1000.169 before 14.0.2056.2; 14.0.3006.16 before 14.0.3471.2
CVE-2024-21333
8.8
2%
Jul 9
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Affected: 14.0.1000.169 before 14.0.2056.2; 14.0.3006.16 before 14.0.3471.2
CVE-2024-21332
8.8
2%
Jul 9
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Affected: 14.0.1000.169 before 14.0.2056.2; 14.0.3006.16 before 14.0.3471.2
CVE-2024-21331
8.8
2%
Jul 9
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Affected: 14.0.1000.169 before 14.0.2056.2; 14.0.3006.16 before 14.0.3471.2
CVE-2024-21317
8.8
2%
Jul 9
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Affected: 14.0.1000.169 before 14.0.2056.2; 14.0.3006.16 before 14.0.3471.2
CVE-2024-21308
8.8
2%
Jul 9
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Affected: 14.0.1000.169 before 14.0.2056.2; 14.0.3006.16 before 14.0.3471.2
CVE-2024-21303
8.8
1%
Jul 9
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Affected: 14.0.0.0 before 14.0.2056.2; 14.0.2056.3 before 14.0.3471.2
CVE-2024-20701
8.8
2%
Jul 9
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
Affected: 14.0.2056.2; 14.0.3471.2
CVE-2026-68787
7.8
0%
Sep 8
Microsoft SQL Server Remote Code Execution Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-32176
7.8
0%
Apr 14
SQL Server Elevation of Privilege Vulnerability
Affected: 14.0.1000.169 before 14.0.2105.1; 14.0.3006.16 before 14.0.3525.1
CVE-2026-32167
7.8
0%
Apr 14
SQL Server Elevation of Privilege Vulnerability
Affected: 14.0.1000.169 before 14.0.2105.1; 14.0.3006.16 before 14.0.3525.1
CVE-2024-49043
7.8
1%
Nov 12
Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
Affected: 14.0.1000.169 before 14.0.2070.1; 14.0.3006.16 before 14.0.3485.1
CVE-2024-49021
7.8
1%
Nov 12
Microsoft SQL Server Remote Code Execution Vulnerability
Affected: 14.0.1000.169 before 14.0.2070.1; 14.0.3006.16 before 14.0.3485.1
CVE-2026-67376
7.5
1%
Sep 8
Microsoft SQL Server Denial of Service Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-47296
7.5
1%
Jul 14
Microsoft SQL Server Elevation of Privilege Vulnerability
Affected: 14.0.1000.169 before 14.0.2120.1; 14.0.3006.16 before 14.0.3540.1
CVE-2025-49719
7.5
15%
Jul 8
Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network
Affected: 14.0.1000.169 before 14.0.2075.8; 14.0.3006.16 before 14.0.3495.9
CVE-2024-43474
7.5
1%
Sep 10
Microsoft SQL Server Information Disclosure Vulnerability
Affected: 14.0.1000.169 before 14.0.2060.1; 14.0.3006.16 before 14.0.3475.1
CVE-2024-37966
7.1
2%
Sep 10
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
Affected: 14.0.1000.169 before 14.0.2060.1; 14.0.3006.16 before 14.0.3475.1
CVE-2026-77485
7.0
0%
Sep 8
SQL Server Elevation of Privilege Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-67645
6.5
1%
Sep 8
Microsoft SQL Server Information Disclosure Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-78441
6.5
1%
Sep 8
Windows OLE DB Information Disclosure Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-69562
6.5
1%
Sep 8
Microsoft SQL Server Information Disclosure Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-68780
6.5
1%
Sep 8
Microsoft SQL Server Information Disclosure Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-68779
6.5
1%
Sep 8
Microsoft SQL Server Information Disclosure Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-68778
6.5
1%
Sep 8
Microsoft SQL Server Information Disclosure Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-68777
6.5
1%
Sep 8
Microsoft SQL Server Information Disclosure Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-68776
6.5
1%
Sep 8
Microsoft SQL Server Information Disclosure Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-67648
6.5
1%
Sep 8
Microsoft SQL Server Information Disclosure Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-67393
6.5
1%
Sep 8
Microsoft SQL Server Information Disclosure Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-67390
6.5
1%
Sep 8
Microsoft SQL Server Information Disclosure Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-67386
6.5
1%
Sep 8
Microsoft SQL Server Information Disclosure Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-68784
6.5
1%
Sep 8
Microsoft SQL Server Information Disclosure Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-68781
6.5
1%
Sep 8
Microsoft SQL Server Information Disclosure Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-67633
6.5
1%
Sep 8
Microsoft SQL Server Denial of Service Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-67630
6.5
1%
Sep 8
Microsoft SQL Server Information Disclosure Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-67629
6.5
1%
Sep 8
Microsoft SQL Server Information Disclosure Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2026-77488
5.5
0%
Sep 8
Microsoft SQL Server Information Disclosure Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2025-47997
5.3
1%
Sep 9
Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network
Affected: 14.0.1000.169 before 14.0.2085.1; 14.0.3006.16 before 14.0.3505.1
CVE-2026-68785
4.9
1%
Sep 8
Microsoft SQL Server Remote Code Execution Vulnerability
Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4
CVE-2024-37342
4.3
2%
Sep 10
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
Affected: 14.0.1000.169 before 14.0.2060.1; 14.0.3006.16 before 14.0.3475.1
CVE-2024-37337
4.3
2%
Sep 10
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
Affected: 14.0.1000.169 before 14.0.2060.1; 14.0.3006.16 before 14.0.3475.1
Page 3 of 3 · 147 total