Login Request a demo
SS
Product
SQL Server
by Microsoft · last CVE Jan 9, 2024
On CISA KEVExploited in the wildRansomware-linked
108
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities108In the news3Timeline
Severity mix
Critical 1High 31Medium 4Low 0
Severity
All severities108Critical1High31Medium4Low0
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add SQL Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-0618
RansomwareIn wildKEV
8.8
99%
Feb 11
Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
Affected: 2012; 2014; 2016
CVE-2019-1068
In wildKEV
8.8
57%
Jul 15
Microsoft SQL Server Remote Code Execution Vulnerability
Affected: 2014; 2014
CVE-2012-1856
In wildKEV
8.8
72%
Aug 15
Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
Affected: 2000; 2000; 2005; 2005; 2008; 2008; +2 more
CVE-2023-38169
8.8
1%
Aug 8
Microsoft SQL OLE DB Remote Code Execution Vulnerability
Affected: 2019; 2022
CVE-2023-21713
8.8
2%
Feb 14
Microsoft SQL Server Remote Code Execution Vulnerability
Affected: 2012; 2014; 2016; 2017; 2019; 2022
CVE-2023-21705
8.8
1%
Feb 14
Microsoft SQL Server Remote Code Execution Vulnerability
Affected: 2012; 2014; 2016; 2017; 2019; 2022
CVE-2021-1636
8.8
7%
Jan 12
Microsoft SQL Elevation of Privilege Vulnerability
Affected: 2012; 2014; 2016; 2017; 2019
CVE-2016-7254
8.8
12%
Nov 10
Microsoft SQL Server 2012 SP2 and 2012 SP3 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privileges via unknown…
Affected: 2012; 2012
CVE-2016-7253
8.8
12%
Nov 10
The agent in Microsoft SQL Server 2012 SP2, 2012 SP3, 2014 SP1, 2014 SP2, and 2016 does not properly check the atxcore.dll ACL, which allows remote authenticated users to gain…
Affected: 2012; 2012; 2014; 2014
CVE-2016-7250
8.8
12%
Nov 10
Microsoft SQL Server 2014 SP1, 2014 SP2, and 2016 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privileges via…
Affected: 2014; 2014; 2016
CVE-2016-7249
8.8
12%
Nov 10
Microsoft SQL Server 2016 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privileges via unknown vectors, aka "SQL…
Affected: 2016
CVE-2024-0056
8.7
1%
Jan 9
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
Affected: 2022; 2022
CVE-2009-2502
8.1
22%
Oct 14
Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002…
Affected: 2005; 2005; 2005; 2005; 2005; 2005
CVE-2023-36785
7.8
1%
Oct 10
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Affected: 2019; 2022
CVE-2023-36730
7.8
1%
Oct 10
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Affected: 2019; 2022
CVE-2023-36420
7.8
1%
Oct 10
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Affected: 2019; 2022
CVE-2023-36417
7.8
1%
Oct 10
Microsoft SQL OLE DB Remote Code Execution Vulnerability
Affected: 2019; 2022
CVE-2023-32027
7.8
1%
Jun 16
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Affected: 2019; 2022
CVE-2023-32026
7.8
1%
Jun 16
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Affected: 2019; 2022
CVE-2023-32025
7.8
1%
Jun 16
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Affected: 2019; 2022
CVE-2023-29356
7.8
1%
Jun 16
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Affected: 2019; 2022
CVE-2023-29349
7.8
1%
Jun 16
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
Affected: 2019; 2022
CVE-2023-32028
7.8
1%
Jun 16
Microsoft SQL OLE DB Remote Code Execution Vulnerability
Affected: 2019; 2022
CVE-2023-21718
7.8
1%
Feb 14
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Affected: 2008; 2008_r2; 2012; 2014; 2016; 2017; +2 more
CVE-2023-21704
7.8
0%
Feb 14
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Affected: 2014; 2016; 2017; 2019; 2022
CVE-2023-21528
7.8
0%
Feb 14
Microsoft SQL Server Remote Code Execution Vulnerability
Affected: 2008; 2012; 2014; 2016; 2017; 2019; +1 more
CVE-2022-23276
7.8
1%
Feb 9
SQL Server for Linux Containers Elevation of Privilege Vulnerability
Affected: 2019
CVE-2022-29143
7.5
2%
Jun 15
Microsoft SQL Server Remote Code Execution Vulnerability
Affected: 2014; 2016; 2016; 2017; 2019
CVE-2017-8516
7.5
8%
Aug 8
Microsoft SQL Server Analysis Services in Microsoft SQL Server 2012, Microsoft SQL Server 2014, and Microsoft SQL Server 2016 allows an information disclosure vulnerability when…
Affected: 2012; 2014; 2014; 2016; 2016
CVE-2002-1872
7.5
7%
Dec 31
Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password
Affected: 6.0; 6.5; 7.0; 7.0; 7.0; 7.0; +4 more
CVE-2023-23384
7.3
1%
Apr 11
Microsoft SQL Server Remote Code Execution Vulnerability
Affected: 2008; 2008; 2012; 2014; 2016; 2017; +2 more
Showing 31