Vulnerabilidades do Microsoft Microsoft SQL Server 2017 (CU 31)

CVE-2026-67639 Alta · 8.8 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67633 Média · 6.5 CWE-125 08/09/2026

Microsoft SQL Server Denial of Service Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.

CVE-2026-67631 Crítica · 9.8 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

CVE-2026-67630 Média · 6.5 CWE-125 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67629 Média · 6.5 CWE-125 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67393 Média · 6.5 CWE-126 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67390 Média · 6.5 CWE-126 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67388 Alta · 8.8 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67386 Média · 6.5 CWE-908 08/09/2026

Microsoft SQL Server Information Disclosure Vulnerability

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-67385 Alta · 8.8 CWE-416 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Use after free in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67384 Alta · 8.8 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67381 Alta · 8.8 CWE-122 08/09/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-67380 Alta · 8.8 CWE-122 08/09/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67376 Alta · 7.5 CWE-190 08/09/2026

Microsoft SQL Server Denial of Service Vulnerability

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.

CVE-2026-67370 Alta · 8.8 CWE-89 08/09/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-67368 Alta · 8.8 CWE-59 08/09/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-66820 Alta · 8.8 CWE-89 08/09/2026

SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-66819 Alta · 8.8 CWE-89 08/09/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-66818 Alta · 8.8 CWE-269 08/09/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-66814 Alta · 8.8 CWE-1220 08/09/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-47295 Alta · 8.8 CWE-89 14/07/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-55002 Alta · 8.8 CWE-73 14/07/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-54118 Crítica · 9.8 CWE-502 14/07/2026

Microsoft SQL Server Remote Code Execution Vulnerability

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

CVE-2026-47296 Alta · 7.5 CWE-89 14/07/2026

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-40370 Alta · 8.8 CWE-610 12/05/2026

SQL Server Remote Code Execution Vulnerability

External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.