SS
Product
Sql Server 2017
On CISA KEVExploited in the wild
147
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 120Medium 22Low 0
Watch
Add Sql Server 2017 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-67645 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-78441 | 6.5 | Sep 8 | Windows OLE DB Information Disclosure Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-69562 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-68780 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-68779 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-68778 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-68777 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-68776 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-67648 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-67393 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-67390 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-67386 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-68784 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-68781 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-67633 | 6.5 | Sep 8 | Microsoft SQL Server Denial of Service Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-67630 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-67629 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2026-77488 | 5.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2025-47997 | 5.3 | Sep 9 | Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network Affected: 14.0.1000.169 before 14.0.2085.1; 14.0.3006.16 before 14.0.3505.1 |
| CVE-2026-68785 | 4.9 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 14.0.2130.4; 14.0.3006.16 before 14.0.3550.4 |
| CVE-2024-37342 | 4.3 | Sep 10 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability Affected: 14.0.1000.169 before 14.0.2060.1; 14.0.3006.16 before 14.0.3475.1 |
| CVE-2024-37337 | 4.3 | Sep 10 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability Affected: 14.0.1000.169 before 14.0.2060.1; 14.0.3006.16 before 14.0.3475.1 |
Showing 22