SS
Product
Sql Server 2019
194
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 163Medium 24Low 0
Watch
Add Sql Server 2019 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-28910 | 8.8 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 15.0.2000.5 before 15.0.2110.4; 15.0.4003.23 before 15.0.4360.2 |
| CVE-2024-28909 | 8.8 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 15.0.2000.5 before 15.0.2110.4; 15.0.4003.23 before 15.0.4360.2 |
| CVE-2024-28908 | 8.8 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 15.0.2000.5 before 15.0.2110.4; 15.0.4003.23 before 15.0.4360.2 |
| CVE-2024-28906 | 8.8 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 15.0.2000.5 before 15.0.2110.4; 15.0.4003.23 before 15.0.4360.2 |
| CVE-2026-67379 | 8.5 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2025-49717 | 8.5 | Jul 8 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network Affected: 15.0.2000.5 before 15.0.2135.5; 15.0.4003.23 before 15.0.4435.7 |
| CVE-2026-47297 | 8.1 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-68787 | 7.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-32176 | 7.8 | Apr 14 | SQL Server Elevation of Privilege Vulnerability Affected: 15.0.2000.5 before 15.0.2165.1; 15.0.4003.23 before 15.0.4465.1 |
| CVE-2026-32167 | 7.8 | Apr 14 | SQL Server Elevation of Privilege Vulnerability Affected: 15.0.2000.5 before 15.0.2165.1; 15.0.4003.23 before 15.0.4465.1 |
| CVE-2024-49043 | 7.8 | Nov 12 | Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability Affected: 15.0.2000.5 before 15.0.2130.3; 15.0.4003.23 before 15.0.4410.1 |
| CVE-2024-49021 | 7.8 | Nov 12 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: 15.0.2000.5 before 15.0.2130.3; 15.0.4003.23 before 15.0.4410.1 |
| CVE-2026-67376 | 7.5 | Sep 8 | Microsoft SQL Server Denial of Service Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-47296 | 7.5 | Jul 14 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 15.0.2000.5 before 15.0.2180.2; 15.0.4003.23 before 15.0.4480.2 |
| CVE-2025-49719 | 7.5 | Jul 8 | Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network Affected: 15.0.2000.5 before 15.0.2135.5; 15.0.4003.23 before 15.0.4435.7 |
| CVE-2025-49718 | 7.5 | Jul 8 | Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network Affected: 15.0.2000.5 before 15.0.2135.5; 15.0.4003.23 before 15.0.4435.7 |
| CVE-2024-43474 | 7.5 | Sep 10 | Microsoft SQL Server Information Disclosure Vulnerability Affected: 15.0.2000.5 before 15.0.2120.1 |
| CVE-2024-29045 | 7.5 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 15.0.2000.5 before 15.0.2110.4; 15.0.4003.23 before 15.0.4360.2 |
| CVE-2024-37966 | 7.1 | Sep 10 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability Affected: 15.0.2000.5 before 15.0.2120.1; 15.0.4003.23 before 15.0.4390.2 |
| CVE-2026-77485 | 7.0 | Sep 8 | SQL Server Elevation of Privilege Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-67645 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-67624 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-78441 | 6.5 | Sep 8 | Windows OLE DB Information Disclosure Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 through 15.0.4490.9 |
| CVE-2026-69562 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-68780 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-68779 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-68778 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-68777 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-68776 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-67648 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-67393 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-67390 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-67386 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-73029 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-68784 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-68781 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-67633 | 6.5 | Sep 8 | Microsoft SQL Server Denial of Service Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-67630 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-67629 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2026-77488 | 5.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2025-47997 | 5.3 | Sep 9 | Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network Affected: 15.0.2000.5 before 15.0.2145.1; 15.0.4003.23 before 15.0.4445.1 |
| CVE-2026-68785 | 4.9 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 15.0.2190.7; 15.0.4003.23 before 15.0.4490.9 |
| CVE-2024-37342 | 4.3 | Sep 10 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability Affected: 15.0.2000.5 before 15.0.2120.1; 15.0.4003.23 before 15.0.4390.2 |
| CVE-2024-37337 | 4.3 | Sep 10 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability Affected: 15.0.2000.5 before 15.0.2120.1; 15.0.4003.23 before 15.0.4390.2 |