Sql Server 2022 vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SS

Product

Sql Server 2022

by Microsoft · last CVE Sep 8, 2026

166

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities166 In the news1 Timeline

Severity mix

Critical 8High 133Medium 25Low 0

Severity

All severities166 Critical8 High133 Medium25 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Sql Server 2022 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-67393	6.5	1%	Sep 8	Microsoft SQL Server Information Disclosure Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2
CVE-2026-67390	6.5	1%	Sep 8	Microsoft SQL Server Information Disclosure Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2
CVE-2026-67386	6.5	1%	Sep 8	Microsoft SQL Server Information Disclosure Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2
CVE-2026-66816	6.5	1%	Sep 8	Microsoft SQL Server Security Feature Bypass Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2
CVE-2026-73029	6.5	1%	Sep 8	Microsoft SQL Server Information Disclosure Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2
CVE-2026-67389	6.5	1%	Sep 8	Microsoft SQL Server Information Disclosure Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2
CVE-2026-68784	6.5	1%	Sep 8	Microsoft SQL Server Information Disclosure Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2
CVE-2026-68781	6.5	1%	Sep 8	Microsoft SQL Server Information Disclosure Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2
CVE-2026-67633	6.5	1%	Sep 8	Microsoft SQL Server Denial of Service Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2
CVE-2026-67630	6.5	1%	Sep 8	Microsoft SQL Server Information Disclosure Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2
CVE-2026-67629	6.5	1%	Sep 8	Microsoft SQL Server Information Disclosure Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2
CVE-2026-77488	5.5	0%	Sep 8	Microsoft SQL Server Information Disclosure Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2
CVE-2025-47997	5.3	1%	Sep 9	Concurrent execution using shared resource with improper synchronization ('race condition') in SQL Server allows an authorized attacker to disclose information over a network Affected: 16.0.1000.6 before 16.0.1150.1; 16.0.4003.1 before 16.0.4212.1
CVE-2026-68785	4.9	1%	Sep 8	Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2
CVE-2024-37342	4.3	2%	Sep 10	Microsoft SQL Server Native Scoring Information Disclosure Vulnerability Affected: 16.0.1000.6 before 16.0.1125.1; 16.0.4003.1 before 16.0.4140.3
CVE-2024-37337	4.3	2%	Sep 10	Microsoft SQL Server Native Scoring Information Disclosure Vulnerability Affected: 16.0.1000.6 before 16.0.1125.1; 16.0.4003.1 before 16.0.4140.3