Veille CVE

Recherche « Microsoft SQL Server »

115 CVE

Critique 14 Élevée 60 Moyenne 41 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft SQL Server » ✕
  1. CVE-2026-114119 9.8 Critique

    Best Practice Software Bp Premier

    Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed without breaking the application. Attackers with network access to the database instance can authenticate as sysadmin, bypass application authentication, and execute operating system commands as SYSTEM.

  2. CVE-2026-108065 9.8 Critique

    Channel Software WebAlliance eCommerce

    SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION — missing] allows an unauthenticated remote attacker to read, write, and potentially execute commands on the backend Microsoft SQL Server via a crafted sUserID parameter value containing a single quote and stacked SQL query.

  3. CVE-2026-96956 8.0 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

  4. CVE-2026-94520 4.9 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

  5. CVE-2026-94512 8.8 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  6. CVE-2026-88089 6.7 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

  7. CVE-2026-88088 7.0 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.

  8. CVE-2026-88086 5.3 Moyenne

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.

  9. CVE-2026-88085 6.4 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

  10. CVE-2026-88084 5.3 Moyenne

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2025 (CU8)

    Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.

  11. CVE-2026-88083 7.5 Élevée

    Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27) · Microsoft SQL Server 2025 (CU8)

    Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

  12. CVE-2026-88082 7.0 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

  13. CVE-2026-88081 7.7 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  14. CVE-2026-85919 7.0 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

  15. CVE-2026-85888 7.7 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  16. CVE-2026-85886 8.5 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  17. CVE-2026-85876 7.0 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

  18. CVE-2026-83945 6.6 Moyenne

    Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27) · Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (CU9)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  19. CVE-2026-70189 6.7 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

  20. CVE-2026-68883 8.5 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

  21. CVE-2026-67628 4.9 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  22. CVE-2026-67626 6.5 Moyenne

    Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27) · Microsoft SQL Server 2025 for x64-based Systems (CU9) · Microsoft SQL Server 2025 for x64-based Systems (GDR)

    Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.

  23. CVE-2026-67625 8.5 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  24. CVE-2026-65674 8.8 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

  25. CVE-2026-70266 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  26. CVE-2026-69867 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.

  27. CVE-2026-103572 8.8 Élevée

    Microsoft Visual Studio 2022 version 17.14 · Microsoft Visual Studio 2026 version 18.10

    Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.

  28. CVE-2026-84058 9.8 Critique

    IBM Guardium Data Protection

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance.

  29. CVE-2023-54400 9.8 Critique

    Fumasoft Fumeng Cloud

    Fumasoft Fumeng Cloud contains a SQL injection vulnerability in the AjaxMethod.ashx endpoint that allows unauthenticated remote attackers to inject arbitrary SQL through the Name parameter of the getEmpByname action without any authentication. Attackers can exploit UNION-based SQL injection techniques against the Microsoft SQL Server backend to extract, disclose, and modify database contents, with potential for further compromise of the underlying server. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-18.

  30. CVE-2026-92237 6.5 Moyenne

    Devolutions PowerShell Universal

    Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an authenticated user with log read permission to obtain application tokens, data protection key material and other stored credentials via SQL parameter values written to the system log on instances backed by Microsoft SQL Server.

  31. CVE-2024-58385 9.8 Critique

    Yonyou U8 CRM

    Yonyou U8 CRM contains an unauthenticated SQL injection vulnerability in the fillbacksettingedit.php configuration endpoint where the DontCheckLogin=1 parameter bypasses authentication and the id parameter is incorporated into SQL queries without sanitization. Attackers can exploit this flaw to execute arbitrary SQL commands and, on Microsoft SQL Server deployments with xp_cmdshell enabled, write backdoor files and execute arbitrary operating system commands. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-02-13.

  32. CVE-2026-78456 8.8 Élevée

    Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR) · Microsoft sql server 2022

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  33. CVE-2026-78442 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.

  34. CVE-2026-78441 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.

  35. CVE-2026-77488 5.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.

  36. CVE-2026-77487 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

  37. CVE-2026-77486 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.

  38. CVE-2026-77485 7.0 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

  39. CVE-2026-77484 8.8 Élevée

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

  40. CVE-2026-77483 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.

  41. CVE-2026-77482 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

  42. CVE-2026-77481 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  43. CVE-2026-77480 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

  44. CVE-2026-73029 6.5 Moyenne

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

  45. CVE-2026-73028 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

  46. CVE-2026-72933 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

  47. CVE-2026-69716 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  48. CVE-2026-69636 6.5 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  49. CVE-2026-69562 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.

  50. CVE-2026-68787 7.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

  51. CVE-2026-68786 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  52. CVE-2026-68785 4.9 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  53. CVE-2026-68784 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  54. CVE-2026-68781 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  55. CVE-2026-68780 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  56. CVE-2026-68779 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  57. CVE-2026-68778 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  58. CVE-2026-68777 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  59. CVE-2026-68776 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

  60. CVE-2026-68775 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  61. CVE-2026-67648 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

  62. CVE-2026-67645 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  63. CVE-2026-67643 9.8 Critique

    Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR)

    Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

  64. CVE-2026-67642 8.8 Élevée

    Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR) · Microsoft sql server 2025

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  65. CVE-2026-67641 6.5 Moyenne

    Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR)

    Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.

  66. CVE-2026-67639 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  67. CVE-2026-67638 8.8 Élevée

    Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR) · Microsoft sql server 2025

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  68. CVE-2026-67636 9.0 Critique

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.

  69. CVE-2026-67633 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.

  70. CVE-2026-67631 9.8 Critique

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

  71. CVE-2026-67630 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  72. CVE-2026-67629 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  73. CVE-2026-67624 6.5 Moyenne

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  74. CVE-2026-67393 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

  75. CVE-2026-67390 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

  76. CVE-2026-67389 6.5 Moyenne

    Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  77. CVE-2026-67388 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  78. CVE-2026-67386 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

  79. CVE-2026-67385 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Use after free in SQL Server allows an authorized attacker to execute code over a network.

  80. CVE-2026-67384 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.

  81. CVE-2026-67383 6.5 Moyenne

    Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR) · Microsoft sql server 2025

    Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.

  82. CVE-2026-67381 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

  83. CVE-2026-67380 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  84. CVE-2026-67379 8.5 Élevée

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  85. CVE-2026-67378 9.0 Critique

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.

  86. CVE-2026-67376 7.5 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.

  87. CVE-2026-67373 8.8 Élevée

    Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR) · Microsoft sql server 2025

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  88. CVE-2026-67370 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  89. CVE-2026-67369 6.5 Moyenne

    Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR) · Microsoft sql server 2025

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  90. CVE-2026-67368 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.

  91. CVE-2026-66820 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  92. CVE-2026-66819 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  93. CVE-2026-66818 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.

  94. CVE-2026-66816 6.5 Moyenne

    Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR)

    Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.

  95. CVE-2026-66814 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

  96. CVE-2026-65669 9.6 Critique

    Microsoft SQL Server Management Studio 22 · Microsoft sql server management studio

    Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.

  97. CVE-2026-62895 8.8 Élevée

    Microsoft Azure Arc SQL Server Extension · Microsoft azure arc sql server extension

    Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

  98. CVE-2026-47297 8.1 Élevée

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

  99. CVE-2026-19475 6.5 Moyenne

    Grafana PostgreSQL Datasource · Grafana MySQL Datasource · Grafana OSS · Grafana Microsoft SQL Server Datasource

    An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can terminate the Grafana server process, resulting in a denial of service. The Microsoft SQL Server, PostgreSQL, and MySQL data sources are affected.

  100. CVE-2026-69502 10.0 Critique

    Microsoft Azure SQL Database

    Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.

  101. CVE-2024-58374 7.5 Élevée

    Hongjing Century e-HR

    Hongjing e-HR contains an unauthenticated SQL injection vulnerability in the getSdutyTree servlet endpoint that allows remote unauthenticated attackers to access protected resources by supplying a path traversal sequence in the request URI to bypass the oauthservlet authentication filter. Attackers can inject UNION-based SQL payloads through the unsanitized codeitemid parameter into the underlying Microsoft SQL Server query to retrieve sensitive database contents including user credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-07-30 (UTC).

  102. CVE-2022-50997 7.5 Élevée

    Weaver Network Co., Ltd. E-cology 9.0 · Weaver Network Co., Ltd. E-cology 8.0

    Weaver (Fanwei) E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET request with UNION-based injection payloads through the unsanitized id parameter to retrieve arbitrary data from the Microsoft SQL Server backend. This vulnerability is potentially remediated in software version 10.53 or 10.54. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-18 (UTC).

  103. CVE-2026-54116 6.5 Moyenne

    Microsoft SQL Server 2025 (CU 6) · Microsoft SQL Server 2025 for x64-based Systems (GDR) · Microsoft sql server 2025

    Access of resource using incompatible type ('type confusion') in SQL Server allows an authorized attacker to disclose information over a network.

  104. CVE-2026-50468 6.5 Moyenne

    Microsoft SQL Server 2025 (CU 6) · Microsoft SQL Server 2025 for x64-based Systems (GDR) · Microsoft sql server 2025

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

  105. CVE-2026-47295 8.8 Élevée

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  106. CVE-2026-55002 8.8 Élevée

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.

  107. CVE-2026-54118 9.8 Critique

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

  108. CVE-2026-54117 9.8 Critique

    Microsoft SQL Server 2025 (CU 6) · Microsoft SQL Server 2025 for x64-based Systems (GDR) · Microsoft sql server 2016 · Microsoft sql server 2017

    Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

  109. CVE-2026-47296 7.5 Élevée

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  110. CVE-2026-42990 9.8 Critique

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.

  111. CVE-2026-54312 8.5 Élevée

    n8n-io n8n · N8n n8n

    n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with permission to create or modify workflows could achieve global prototype pollution via the Microsoft SQL node by supplying a crafted value as the table parameter. This pollutes Object.prototype process-wide for the lifetime of the n8n server process, causing application-wide validation failures and rendering the n8n instance completely non-functional until restarted. This vulnerability is fixed in 2.24.0.

  112. CVE-2026-40370 8.8 Élevée

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.

  113. CVE-2026-6093 6.0 Moyenne

    cortezaproject corteza

    Corteza contains a SQL injection vulnerability in its Microsoft SQL Server (MSSQL) backend when filtering Compose records by the meta field.This issue affects corteza: 2024.9.8.

  114. CVE-2020-0618 8.8 Élevée Exploitée Rançongiciel

    Microsoft SQL Server · Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR) · Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU) · Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)

    A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.

  115. CVE-2019-1068 8.8 Élevée Exploitée

    Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR) · Microsoft SQL Server · Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR) · Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR)

    A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.