Vulnerabilidades do Microsoft Microsoft SQL Server 2017 (GDR)
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Microsoft Microsoft SQL Server 2017 (GDR): 63 registro(s), com versões afetadas e correções.
CVE-2026-96956
Alta · 8.0
CWE-121 13/10/2026
SQL Server Elevation of Privilege Vulnerability
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-94520
Média · 4.9
CWE-134 13/10/2026
Microsoft SQL Server Denial of Service Vulnerability
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
CVE-2026-94512
Alta · 8.8
CWE-122 13/10/2026
SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-88089
Média · 6.7
CWE-20 13/10/2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
CVE-2026-88085
Média · 6.4
CWE-122 13/10/2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-88081
Alta · 7.7
CWE-125 13/10/2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-85888
Alta · 7.7
CWE-125 13/10/2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-85886
Alta · 8.5
CWE-122 13/10/2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-70189
Média · 6.7
CWE-122 13/10/2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
CVE-2026-68883
Alta · 8.5
CWE-122 13/10/2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-67628
Média · 4.9
CWE-125 13/10/2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67625
Alta · 8.5
CWE-122 13/10/2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-77481
Alta · 8.8
CWE-122 08/09/2026
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67645
Média · 6.5
CWE-125 08/09/2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-66819
Alta · 8.8
CWE-89 08/09/2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-78442
Alta · 8.8
CWE-122 08/09/2026
Windows OLE DB Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.
CVE-2026-78441
Média · 6.5
CWE-125 08/09/2026
Windows OLE DB Information Disclosure Vulnerability
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.
CVE-2026-69562
Média · 6.5
CWE-125 08/09/2026
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-77488
Média · 5.5
CWE-191 08/09/2026
Microsoft SQL Server Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.
CVE-2026-77486
Alta · 8.8
CWE-190 08/09/2026
Microsoft SQL Server Remote Code Execution Vulnerability
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-77485
Alta · 7.0
CWE-416 08/09/2026
SQL Server Elevation of Privilege Vulnerability
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-77487
Alta · 8.8
CWE-284 08/09/2026
SQL Server Elevation of Privilege Vulnerability
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-77483
Alta · 8.8
CWE-1390 08/09/2026
SQL Server Elevation of Privilege Vulnerability
Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-77480
Alta · 8.8
CWE-1220 08/09/2026
SQL Server Elevation of Privilege Vulnerability
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-73028
Alta · 8.8
CWE-284 08/09/2026
SQL Server Elevation of Privilege Vulnerability
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.