CVE Intelligence

Microsoft Microsoft SQL Server 2017 (CU 31) vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Microsoft SQL Server 2017 (CU 31): 55 record(s), with affected versions and fixes.

CVE-2026-67639 High · 8.8 CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67633 Medium · 6.5 CWE-125 Sep 8, 2026
Microsoft SQL Server Denial of Service Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.
CVE-2026-67631 Critical · 9.8 CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-67630 Medium · 6.5 CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67629 Medium · 6.5 CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67393 Medium · 6.5 CWE-126 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67390 Medium · 6.5 CWE-126 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67388 High · 8.8 CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67386 Medium · 6.5 CWE-908 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67385 High · 8.8 CWE-416 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Use after free in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67384 High · 8.8 CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67381 High · 8.8 CWE-122 Sep 8, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-67380 High · 8.8 CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67376 High · 7.5 CWE-190 Sep 8, 2026
Microsoft SQL Server Denial of Service Vulnerability
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
CVE-2026-67370 High · 8.8 CWE-89 Sep 8, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-67368 High · 8.8 CWE-59 Sep 8, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66820 High · 8.8 CWE-89 Sep 8, 2026
SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66819 High · 8.8 CWE-89 Sep 8, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66818 High · 8.8 CWE-269 Sep 8, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66814 High · 8.8 CWE-1220 Sep 8, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-47295 High · 8.8 CWE-89 Jul 14, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-55002 High · 8.8 CWE-73 Jul 14, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-54118 Critical · 9.8 CWE-502 Jul 14, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-47296 High · 7.5 CWE-89 Jul 14, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-40370 High · 8.8 CWE-610 May 12, 2026
SQL Server Remote Code Execution Vulnerability
External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.