SS
Product
Sql Server 2017
On CISA KEVExploited in the wild
147
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 120Medium 22Low 0
Watch
Add Sql Server 2017 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21373 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2056.2; 14.0.3006.16 before 14.0.3471.2 |
| CVE-2024-21335 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2056.2; 14.0.3006.16 before 14.0.3471.2 |
| CVE-2024-21333 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2056.2; 14.0.3006.16 before 14.0.3471.2 |
| CVE-2024-21332 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2056.2; 14.0.3006.16 before 14.0.3471.2 |
| CVE-2024-21331 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2056.2; 14.0.3006.16 before 14.0.3471.2 |
| CVE-2024-21317 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2056.2; 14.0.3006.16 before 14.0.3471.2 |
| CVE-2024-21308 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2056.2; 14.0.3006.16 before 14.0.3471.2 |
| CVE-2024-21303 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 14.0.0.0 before 14.0.2056.2; 14.0.2056.3 before 14.0.3471.2 |
| CVE-2024-20701 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: 14.0.2056.2; 14.0.3471.2 |
| CVE-2026-68787 | 7.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-32176 | 7.8 | Apr 14 | SQL Server Elevation of Privilege Vulnerability Affected: 14.0.1000.169 before 14.0.2105.1; 14.0.3006.16 before 14.0.3525.1 |
| CVE-2026-32167 | 7.8 | Apr 14 | SQL Server Elevation of Privilege Vulnerability Affected: 14.0.1000.169 before 14.0.2105.1; 14.0.3006.16 before 14.0.3525.1 |
| CVE-2024-49043 | 7.8 | Nov 12 | Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2070.1; 14.0.3006.16 before 14.0.3485.1 |
| CVE-2024-49021 | 7.8 | Nov 12 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2070.1; 14.0.3006.16 before 14.0.3485.1 |
| CVE-2026-67376 | 7.5 | Sep 8 | Microsoft SQL Server Denial of Service Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-47296 | 7.5 | Jul 14 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 14.0.1000.169 before 14.0.2120.1; 14.0.3006.16 before 14.0.3540.1 |
| CVE-2025-49719 | 7.5 | Jul 8 | Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network Affected: 14.0.1000.169 before 14.0.2075.8; 14.0.3006.16 before 14.0.3495.9 |
| CVE-2024-43474 | 7.5 | Sep 10 | Microsoft SQL Server Information Disclosure Vulnerability Affected: 14.0.1000.169 before 14.0.2060.1; 14.0.3006.16 before 14.0.3475.1 |
| CVE-2024-37966 | 7.1 | Sep 10 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability Affected: 14.0.1000.169 before 14.0.2060.1; 14.0.3006.16 before 14.0.3475.1 |
| CVE-2026-77485 | 7.0 | Sep 8 | SQL Server Elevation of Privilege Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |