SS
Product
Sql Server 2022
166
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 133Medium 25Low 0
Watch
Add Sql Server 2022 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77481 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-66819 | 8.8 | Sep 8 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-78456 | 8.8 | Sep 8 | SQL Server Remote Code Execution Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-77487 | 8.8 | Sep 8 | SQL Server Elevation of Privilege Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-77484 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-77483 | 8.8 | Sep 8 | SQL Server Elevation of Privilege Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-77480 | 8.8 | Sep 8 | SQL Server Elevation of Privilege Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-73028 | 8.8 | Sep 8 | SQL Server Elevation of Privilege Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-68775 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-67639 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-67388 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-67385 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-67381 | 8.8 | Sep 8 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-67380 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-66820 | 8.8 | Sep 8 | SQL Server Elevation of Privilege Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-66818 | 8.8 | Sep 8 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-66814 | 8.8 | Sep 8 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-68786 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-67384 | 8.8 | Sep 8 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-67370 | 8.8 | Sep 8 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-67368 | 8.8 | Sep 8 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: before 16.0.1200.5; 16.0.4003.1 before 16.0.4275.2 |
| CVE-2026-47295 | 8.8 | Jul 14 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 16.0.1000.6 before 16.0.1190.2; 16.0.4003.1 before 16.0.4262.2 |
| CVE-2026-55002 | 8.8 | Jul 14 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 16.0.1000.6 before 16.0.1190.2; 16.0.4003.1 before 16.0.4262.2 |
| CVE-2026-40370 | 8.8 | May 12 | SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1180.1; 16.0.4003.1 before 16.0.4252.3 |
| CVE-2026-33120 | 8.8 | Apr 14 | Microsoft SQL Server Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1175.1; 16.0.4003.1 before 16.0.4250.1 |
| CVE-2026-26116 | 8.8 | Mar 10 | SQL Server Elevation of Privilege Vulnerability Affected: 16.0.1000.6 before 16.0.1170.5; 16.0.4003.1 before 16.0.4240.4 |
| CVE-2026-26115 | 8.8 | Mar 10 | SQL Server Elevation of Privilege Vulnerability Affected: 16.0.1000.6 before 16.0.1170.5; 16.0.4003.1 before 16.0.4240.4 |
| CVE-2026-21262 | 8.8 | Mar 10 | SQL Server Elevation of Privilege Vulnerability Affected: 16.0.1000.6 before 16.0.1170.5; 16.0.4003.1 before 16.0.4240.4 |
| CVE-2025-59499 | 8.8 | Nov 11 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 16.0.1000.6 before 16.0.1160.1; 16.0.4003.1 before 16.0.4222.2 |
| CVE-2025-55227 | 8.8 | Sep 9 | Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 16.0.1000.6 before 16.0.1150.1; 16.0.4003.1 before 16.0.4212.1 |
| CVE-2025-53727 | 8.8 | Aug 12 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 16.0.1000.6 before 16.0.1145.1; 16.0.4003.1 before 16.0.4210.1 |
| CVE-2025-49759 | 8.8 | Aug 12 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 16.0.1000.6 before 16.0.1145.1; 16.0.4003.1 before 16.0.4210.1 |
| CVE-2025-49758 | 8.8 | Aug 12 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 16.0.1000.6 before 16.0.1145.1; 16.0.4003.1 before 16.0.4210.1 |
| CVE-2025-47954 | 8.8 | Aug 12 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 16.0.1000.6 before 16.0.1145.1; 16.0.4003.1 before 16.0.4210.1 |
| CVE-2025-24999 | 8.8 | Aug 12 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network Affected: 16.0.1000.6 before 16.0.1145.1; 16.0.4003.1 before 16.0.4210.1 |
| CVE-2024-37965 | 8.8 | Sep 10 | Microsoft SQL Server Elevation of Privilege Vulnerability Affected: 16.0.1000.6 before 16.0.1125.1; 16.0.4003.1 before 16.0.4140.3 |
| CVE-2024-26191 | 8.8 | Sep 10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1125.1; 16.0.4003.1 before 16.0.4140.3 |
| CVE-2024-26186 | 8.8 | Sep 10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1125.1; 16.0.4003.1 before 16.0.4140.3 |
| CVE-2024-37339 | 8.8 | Sep 10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1125.1; 16.0.4003.1 before 16.0.4140.3 |
| CVE-2024-37340 | 8.8 | Sep 10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1125.1; 16.0.4003.1 before 16.0.4140.3 |
| CVE-2024-37335 | 8.8 | Sep 10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1125.1; 16.0.4003.1 before 16.0.4140.3 |
| CVE-2024-37338 | 8.8 | Sep 10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability Affected: 16.0.1000.6 before 16.0.1125.1; 16.0.4003.1 before 16.0.4140.3 |
| CVE-2024-38088 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 16.0.1121.4; 16.0.4125.3 before 16.0.4131.2 |
| CVE-2024-38087 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 16.0.1121.4; 16.0.4125.3 before 16.0.4131.2 |
| CVE-2024-37336 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 16.0.1121.4; 16.0.4125.3 before 16.0.4131.2 |
| CVE-2024-37334 | 8.8 | Jul 9 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability Affected: before 16.0.1121.4; 16.0.4125.3 before 16.0.4131.2 |
| CVE-2024-37333 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 16.0.1121.4; 16.0.4125.3 before 16.0.4131.2 |
| CVE-2024-37332 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 16.0.1121.4; 16.0.4125.3 before 16.0.4131.2 |
| CVE-2024-37331 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 16.0.1121.4; 16.0.4125.3 before 16.0.4131.2 |
| CVE-2024-37330 | 8.8 | Jul 9 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Affected: before 16.0.1121.4; 16.0.4125.3 before 16.0.4131.2 |