SS
Product
Sql Server 2017
On CISA KEVExploited in the wild
147
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 120Medium 22Low 0
Watch
Add Sql Server 2017 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1068 In wildKEV | 8.8 | Jul 15 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2027.2; 14.0.3006.16 before 14.0.3192.2 |
| CVE-2026-77481 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-66819 | 8.8 | Sep 8 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-78442 | 8.8 | Sep 8 | Windows OLE DB Remote Code Execution Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-77486 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-77487 | 8.8 | Sep 8 | SQL Server Elevation of Privilege Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-77483 | 8.8 | Sep 8 | SQL Server Elevation of Privilege Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-77480 | 8.8 | Sep 8 | SQL Server Elevation of Privilege Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-73028 | 8.8 | Sep 8 | SQL Server Elevation of Privilege Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-68775 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-67639 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-67388 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-67385 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-67381 | 8.8 | Sep 8 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-67380 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-66820 | 8.8 | Sep 8 | SQL Server Elevation of Privilege Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-66818 | 8.8 | Sep 8 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-66814 | 8.8 | Sep 8 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-68786 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-67384 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-67370 | 8.8 | Sep 8 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-67368 | 8.8 | Sep 8 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-77482 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-47295 | 8.8 | Jul 14 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 14.0.1000.169 before 14.0.2120.1; 14.0.3006.16 before 14.0.3540.1 |
| CVE-2026-55002 | 8.8 | Jul 14 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 14.0.1000.169 before 14.0.2120.1; 14.0.3006.16 before 14.0.3540.1 |
| CVE-2026-40370 | 8.8 | May 12 | SQL Server Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2110.2; 14.0.3006.16 before 14.0.3530.2 |
| CVE-2026-33120 | 8.8 | Apr 14 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2105.1; 14.0.3006.16 before 14.0.3525.1 |
| CVE-2026-26116 | 8.8 | Mar 10 | SQL Server Elevation of Privilege Vulnerability Affected: 14.0.1000.169 before 14.0.2100.4; 14.0.3006.16 before 14.0.3520.4 |
| CVE-2026-26115 | 8.8 | Mar 10 | SQL Server Elevation of Privilege Vulnerability Affected: 14.0.1000.169 before 14.0.2100.4; 14.0.3006.16 before 14.0.3520.4 |
| CVE-2026-21262 | 8.8 | Mar 10 | SQL Server Elevation of Privilege Vulnerability Affected: 14.0.1000.169 before 14.0.2100.4; 14.0.3006.16 before 14.0.3520.4 |
| CVE-2025-59499 | 8.8 | Nov 11 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 14.0.1000.169 before 14.0.2095.1; 14.0.3006.16 before 14.0.3515.1 |
| CVE-2025-55227 | 8.8 | Sep 9 | Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 14.0.1000.169 before 14.0.2085.1; 14.0.3006.16 before 14.0.3505.1 |
| CVE-2025-53727 | 8.8 | Aug 12 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 14.0.1000.169 before 14.0.2080.1; 14.0.3006.16 before 14.0.3500.1 |
| CVE-2025-49759 | 8.8 | Aug 12 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 14.0.1000.169 before 14.0.2080.1; 14.0.3006.16 before 14.0.3500.1 |
| CVE-2025-49758 | 8.8 | Aug 12 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 14.0.1000.169 before 14.0.2080.1; 14.0.3006.16 before 14.0.3500.1 |
| CVE-2025-24999 | 8.8 | Aug 12 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 14.0.1000.169 before 14.0.2080.1; 14.0.3006.16 before 14.0.3500.1 |
| CVE-2024-49018 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2070.1; 14.0.3006.16 before 14.0.3485.1 |
| CVE-2024-49017 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2070.1; 14.0.3006.16 before 14.0.3485.1 |
| CVE-2024-49016 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2070.1; 14.0.3006.16 before 14.0.3485.1 |
| CVE-2024-49015 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2070.1; 14.0.3006.16 before 14.0.3485.1 |
| CVE-2024-49014 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2070.1; 14.0.3006.16 before 14.0.3485.1 |
| CVE-2024-49013 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2070.1; 14.0.3006.16 before 14.0.3485.1 |
| CVE-2024-49012 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2070.1; 14.0.3006.16 before 14.0.3485.1 |
| CVE-2024-49011 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2070.1; 14.0.3006.16 before 14.0.3485.1 |
| CVE-2024-49010 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2070.1; 14.0.3006.16 before 14.0.3485.1 |
| CVE-2024-49009 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2070.1; 14.0.3006.16 before 14.0.3485.1 |
| CVE-2024-49008 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2070.1; 14.0.3006.16 before 14.0.3485.1 |
| CVE-2024-49007 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2070.1; 14.0.3006.16 before 14.0.3485.1 |
| CVE-2024-49006 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2070.1; 14.0.3006.16 before 14.0.3485.1 |
| CVE-2024-49005 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 14.0.1000.169 before 14.0.2070.1; 14.0.3006.16 before 14.0.3485.1 |