Microsoft Sql Server 2025 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Sql Server 2025: 71 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:sql_server_2025
CVE-2026-67639
High · 8.8
CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67638
High · 8.8
CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67636
Critical · 9.0
CWE-125 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-67633
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft SQL Server Denial of Service Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.
CVE-2026-67631
Critical · 9.8
CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-67630
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67629
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67624
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67393
Medium · 6.5
CWE-126 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67390
Medium · 6.5
CWE-126 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67389
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67388
High · 8.8
CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67386
Medium · 6.5
CWE-908 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67385
High · 8.8
CWE-416 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Use after free in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67384
High · 8.8
CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67383
Medium · 6.5
CWE-209 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67381
High · 8.8
CWE-122 Sep 8, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-67380
High · 8.8
CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67379
High · 8.5
CWE-121 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67378
Critical · 9.0
CWE-822 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-67376
High · 7.5
CWE-190 Sep 8, 2026
Microsoft SQL Server Denial of Service Vulnerability
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
CVE-2026-67373
High · 8.8
CWE-122 Sep 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67370
High · 8.8
CWE-89 Sep 8, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-67369
Medium · 6.5
CWE-125 Sep 8, 2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67368
High · 8.8
CWE-59 Sep 8, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.