SS
Product
Sql Server 2022
166
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 133Medium 25Low 0
Watch
Add Sql Server 2022 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-28942 | 8.8 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28941 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28940 | 8.8 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28939 | 8.8 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28938 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28937 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28936 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28935 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28934 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28933 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28932 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28931 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28930 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28929 | 8.8 | Apr 9 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28927 | 8.8 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28926 | 8.8 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28915 | 8.8 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28914 | 8.8 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28913 | 8.8 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28912 | 8.8 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28911 | 8.8 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28910 | 8.8 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28909 | 8.8 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28908 | 8.8 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2024-28906 | 8.8 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2026-67379 | 8.5 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2025-49717 | 8.5 | Jul 8 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network Affected: 16.0.1000.6 before 16.0.1140.6; 16.0.4003.1 before 16.0.4200.1 |
| CVE-2026-47297 | 8.1 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-68787 | 7.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-32176 | 7.8 | Apr 14 | SQL Server Elevation of Privilege Vulnerability Affected: 16.0.1000.6 before 16.0.1175.1; 16.0.4003.1 before 16.0.4250.1 |
| CVE-2026-32167 | 7.8 | Apr 14 | SQL Server Elevation of Privilege Vulnerability Affected: 16.0.1000.6 before 16.0.1175.1; 16.0.4003.1 before 16.0.4250.1 |
| CVE-2024-49043 | 7.8 | Nov 12 | Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1135.2; 16.0.4003.1 before 16.0.4155.4 |
| CVE-2024-49021 | 7.8 | Nov 12 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1135.2; 16.0.4003.1 before 16.0.4155.4 |
| CVE-2026-67376 | 7.5 | Sep 8 | Microsoft SQL Server Denial of Service Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-47296 | 7.5 | Jul 14 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 16.0.1000.6 before 16.0.1190.2; 16.0.4003.1 before 16.0.4262.2 |
| CVE-2025-49719 | 7.5 | Jul 8 | Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network Affected: 16.0.1000.6 before 16.0.1140.6; 16.0.4003.1 before 16.0.4200.1 |
| CVE-2025-49718 | 7.5 | Jul 8 | Use of uninitialized resource in SQL Server allows an unauthorized attacker to disclose information over a network Affected: 16.0.1000.6 before 16.0.1140.6; 16.0.4003.1 before 16.0.4200.1 |
| CVE-2024-29045 | 7.5 | Apr 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1115.1; 16.0.4003.1 before 16.0.4120.1 |
| CVE-2026-20803 | 7.2 | Jan 13 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 16.0.1000.6 before 16.0.1165.1; 16.0.4003.1 before 16.0.4230.2 |
| CVE-2024-37966 | 7.1 | Sep 10 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability Affected: 16.0.1000.6 before 16.0.1125.1; 16.0.4003.1 before 16.0.4140.3 |
| CVE-2026-77485 | 7.0 | Sep 8 | SQL Server Elevation of Privilege Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-67645 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-67624 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-68780 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-68779 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-68778 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-68777 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-68776 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-67648 | 6.5 | Sep 8 | Microsoft SQL Server Information Disclosure Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-67641 | 6.5 | Sep 8 | Microsoft SQL Server Denial of Service Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |