SS
Product
Sql Server 2019
194
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 163Medium 24Low 0
Watch
Add Sql Server 2019 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-67631 | 9.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-54118 | 9.8 | Jul 14 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: 15.0.2000.5 before 15.0.2180.2; 15.0.4003.23 before 15.0.4480.2 |
| CVE-2026-54117 | 9.8 | Jul 14 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: 15.0.2000.5 before 15.0.2180.2; 15.0.4003.23 before 15.0.4480.2 |
| CVE-2024-37980 | 9.8 | Sep 10 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 15.0.2000.5 before 15.0.2120.1; 15.0.4003.23 before 15.0.4390.2 |
| CVE-2024-37341 | 9.8 | Sep 10 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 15.0.2000.5 before 15.0.2120.1; 15.0.4003.23 before 15.0.4390.2 |
| CVE-2026-67636 | 9.0 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-67378 | 9.0 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-77481 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-66819 | 8.8 | Sep 8 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-78442 | 8.8 | Sep 8 | Windows OLE DB Remote Code Execution Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 through 15.0.4490.9 |
| CVE-2026-77486 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-77487 | 8.8 | Sep 8 | SQL Server Elevation of Privilege Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-77484 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-77483 | 8.8 | Sep 8 | SQL Server Elevation of Privilege Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-77480 | 8.8 | Sep 8 | SQL Server Elevation of Privilege Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-73028 | 8.8 | Sep 8 | SQL Server Elevation of Privilege Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-68775 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-67639 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-67388 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-67385 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-67381 | 8.8 | Sep 8 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-67380 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-66820 | 8.8 | Sep 8 | SQL Server Elevation of Privilege Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-66818 | 8.8 | Sep 8 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-66814 | 8.8 | Sep 8 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-68786 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-67384 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-67370 | 8.8 | Sep 8 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-67368 | 8.8 | Sep 8 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-77482 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-47295 | 8.8 | Jul 14 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 15.0.2000.5 before 15.0.2180.2; 15.0.4003.23 before 15.0.4480.2 |
| CVE-2026-55002 | 8.8 | Jul 14 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 15.0.2000.5 before 15.0.2180.2; 15.0.4003.23 before 15.0.4480.2 |
| CVE-2026-40370 | 8.8 | May 12 | SQL Server Remote Code Execution Vulnerability Affected: 15.0.2000.5 before 15.0.2170.1; 15.0.4003.23 before 15.0.4470.1 |
| CVE-2026-33120 | 8.8 | Apr 14 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: 15.0.2000.5 before 15.0.2165.1; 15.0.4003.23 before 15.0.4465.1 |
| CVE-2026-26116 | 8.8 | Mar 10 | SQL Server Elevation of Privilege Vulnerability Affected: 15.0.2000.5 before 15.0.2160.4; 15.0.4003.23 before 15.0.4460.4 |
| CVE-2026-26115 | 8.8 | Mar 10 | SQL Server Elevation of Privilege Vulnerability Affected: 15.0.2000.5 before 15.0.2160.4; 15.0.4003.23 before 15.0.4460.4 |
| CVE-2026-21262 | 8.8 | Mar 10 | SQL Server Elevation of Privilege Vulnerability Affected: 15.0.2000.5 before 15.0.2160.4; 15.0.4003.23 before 15.0.4460.4 |
| CVE-2025-59499 | 8.8 | Nov 11 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 15.0.2000.5 before 15.0.2155.2; 15.0.4003.23 before 15.0.4455.2 |
| CVE-2025-55227 | 8.8 | Sep 9 | Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 15.0.2000.5 before 15.0.2145.1; 15.0.4003.23 before 15.0.4445.1 |
| CVE-2025-53727 | 8.8 | Aug 12 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 15.0.2000.5 before 15.0.2140.1; 15.0.4003.23 before 15.0.4440.1 |
| CVE-2025-49759 | 8.8 | Aug 12 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 15.0.2000.5 before 15.0.2140.1; 15.0.4003.23 before 15.0.4440.1 |
| CVE-2025-49758 | 8.8 | Aug 12 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 15.0.2000.5 before 15.0.2140.1; 15.0.4003.23 before 15.0.4440.1 |
| CVE-2025-24999 | 8.8 | Aug 12 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 15.0.2000.5 before 15.0.2140.1; 15.0.4003.23 before 15.0.4440.1 |
| CVE-2024-49018 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 15.0.2000.5 before 15.0.2130.3; 15.0.4003.23 before 15.0.4410.1 |
| CVE-2024-49017 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 15.0.2000.5 before 15.0.2130.3; 15.0.4003.23 before 15.0.4410.1 |
| CVE-2024-49016 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 15.0.2000.5 before 15.0.2130.3; 15.0.4003.23 before 15.0.4410.1 |
| CVE-2024-49015 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 15.0.2000.5 before 15.0.2130.3; 15.0.4003.23 before 15.0.4410.1 |
| CVE-2024-49014 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 15.0.2000.5 before 15.0.2130.3; 15.0.4003.23 before 15.0.4410.1 |
| CVE-2024-49013 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 15.0.2000.5 before 15.0.2130.3; 15.0.4003.23 before 15.0.4410.1 |
| CVE-2024-49012 | 8.8 | Nov 12 | SQL Server Native Client Remote Code Execution Vulnerability Affected: 15.0.2000.5 before 15.0.2130.3; 15.0.4003.23 before 15.0.4410.1 |
