Microsoft Sql Server 2025 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Sql Server 2025: 71 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:sql_server_2025
CVE-2026-77488
Medium · 5.5
CWE-191 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.
CVE-2026-77487
High · 8.8
CWE-284 Sep 8, 2026
SQL Server Elevation of Privilege Vulnerability
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-77485
High · 7.0
CWE-416 Sep 8, 2026
SQL Server Elevation of Privilege Vulnerability
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-77484
High · 8.8
CWE-502 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-77483
High · 8.8
CWE-1390 Sep 8, 2026
SQL Server Elevation of Privilege Vulnerability
Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-77481
High · 8.8
CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-77480
High · 8.8
CWE-1220 Sep 8, 2026
SQL Server Elevation of Privilege Vulnerability
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-73029
Medium · 6.5
CWE-126 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-73028
High · 8.8
CWE-284 Sep 8, 2026
SQL Server Elevation of Privilege Vulnerability
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-68787
High · 7.8
CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
CVE-2026-68786
High · 8.8
CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-68785
Medium · 4.9
CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-68784
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68781
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68780
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68779
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68778
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68777
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68776
Medium · 6.5
CWE-908 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68775
High · 8.8
CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67648
Medium · 6.5
CWE-908 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67645
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67643
Critical · 9.8
CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-67642
High · 8.8
CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67641
Medium · 6.5
CWE-190 Sep 8, 2026
Microsoft SQL Server Denial of Service Vulnerability
Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.