Microsoft Microsoft SQL Server 2017 (GDR) vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Microsoft SQL Server 2017 (GDR): 63 record(s), with affected versions and fixes.
CVE-2026-96956
High · 8.0
CWE-121 Oct 13, 2026
SQL Server Elevation of Privilege Vulnerability
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-94520
Medium · 4.9
CWE-134 Oct 13, 2026
Microsoft SQL Server Denial of Service Vulnerability
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
CVE-2026-94512
High · 8.8
CWE-122 Oct 13, 2026
SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-88089
Medium · 6.7
CWE-20 Oct 13, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
CVE-2026-88085
Medium · 6.4
CWE-122 Oct 13, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-88081
High · 7.7
CWE-125 Oct 13, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-85888
High · 7.7
CWE-125 Oct 13, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-85886
High · 8.5
CWE-122 Oct 13, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-70189
Medium · 6.7
CWE-122 Oct 13, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
CVE-2026-68883
High · 8.5
CWE-122 Oct 13, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-67628
Medium · 4.9
CWE-125 Oct 13, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67625
High · 8.5
CWE-122 Oct 13, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-77481
High · 8.8
CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67645
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-66819
High · 8.8
CWE-89 Sep 8, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-78442
High · 8.8
CWE-122 Sep 8, 2026
Windows OLE DB Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.
CVE-2026-78441
Medium · 6.5
CWE-125 Sep 8, 2026
Windows OLE DB Information Disclosure Vulnerability
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.
CVE-2026-69562
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-77488
Medium · 5.5
CWE-191 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.
CVE-2026-77486
High · 8.8
CWE-190 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-77485
High · 7.0
CWE-416 Sep 8, 2026
SQL Server Elevation of Privilege Vulnerability
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-77487
High · 8.8
CWE-284 Sep 8, 2026
SQL Server Elevation of Privilege Vulnerability
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-77483
High · 8.8
CWE-1390 Sep 8, 2026
SQL Server Elevation of Privilege Vulnerability
Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-77480
High · 8.8
CWE-1220 Sep 8, 2026
SQL Server Elevation of Privilege Vulnerability
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-73028
High · 8.8
CWE-284 Sep 8, 2026
SQL Server Elevation of Privilege Vulnerability
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.