CVE Intelligence

Microsoft Sql Server 2022 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Sql Server 2022: 66 record(s), with affected versions and fixes.
cpe:2.3:a:microsoft:sql_server_2022

CVE-2026-67639 High · 8.8 CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67636 Critical · 9.0 CWE-125 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-67633 Medium · 6.5 CWE-125 Sep 8, 2026
Microsoft SQL Server Denial of Service Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.
CVE-2026-67631 Critical · 9.8 CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-67630 Medium · 6.5 CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67629 Medium · 6.5 CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67624 Medium · 6.5 CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67393 Medium · 6.5 CWE-126 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67390 Medium · 6.5 CWE-126 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67389 Medium · 6.5 CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67388 High · 8.8 CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67386 Medium · 6.5 CWE-908 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67385 High · 8.8 CWE-416 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Use after free in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67384 High · 8.8 CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67381 High · 8.8 CWE-122 Sep 8, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-67380 High · 8.8 CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67379 High · 8.5 CWE-121 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67378 Critical · 9.0 CWE-822 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-67376 High · 7.5 CWE-190 Sep 8, 2026
Microsoft SQL Server Denial of Service Vulnerability
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
CVE-2026-67370 High · 8.8 CWE-89 Sep 8, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-67368 High · 8.8 CWE-59 Sep 8, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66820 High · 8.8 CWE-89 Sep 8, 2026
SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66819 High · 8.8 CWE-89 Sep 8, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66818 High · 8.8 CWE-269 Sep 8, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66816 Medium · 6.5 CWE-778 Sep 8, 2026
Microsoft SQL Server Security Feature Bypass Vulnerability
Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.