Veille CVE

Recherche « Microsoft SQL Server 2022 (GDR) »

79 CVE

Critique 6 Élevée 43 Moyenne 30 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft SQL Server 2022 (GDR) » ✕
  1. CVE-2026-96956 8.0 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

  2. CVE-2026-94520 4.9 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

  3. CVE-2026-94512 8.8 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  4. CVE-2026-88089 6.7 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

  5. CVE-2026-88088 7.0 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.

  6. CVE-2026-88086 5.3 Moyenne

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.

  7. CVE-2026-88085 6.4 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

  8. CVE-2026-88083 7.5 Élevée

    Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27) · Microsoft SQL Server 2025 (CU8)

    Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

  9. CVE-2026-88082 7.0 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

  10. CVE-2026-88081 7.7 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  11. CVE-2026-85919 7.0 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

  12. CVE-2026-85888 7.7 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  13. CVE-2026-85886 8.5 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  14. CVE-2026-85876 7.0 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

  15. CVE-2026-83945 6.6 Moyenne

    Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27) · Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (CU9)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  16. CVE-2026-70189 6.7 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

  17. CVE-2026-68883 8.5 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

  18. CVE-2026-67628 4.9 Moyenne

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  19. CVE-2026-67626 6.5 Moyenne

    Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27) · Microsoft SQL Server 2025 for x64-based Systems (CU9) · Microsoft SQL Server 2025 for x64-based Systems (GDR)

    Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.

  20. CVE-2026-67625 8.5 Élevée

    Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2017 for x64-based Systems (CU31) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  21. CVE-2026-65674 8.8 Élevée

    Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2019 for x64-based Systems (CU32) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2022 for x64-based Systems (CU27)

    Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

  22. CVE-2026-78456 8.8 Élevée

    Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR) · Microsoft sql server 2022

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  23. CVE-2026-77488 5.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.

  24. CVE-2026-77487 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

  25. CVE-2026-77485 7.0 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

  26. CVE-2026-77484 8.8 Élevée

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

  27. CVE-2026-77483 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.

  28. CVE-2026-77481 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  29. CVE-2026-77480 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

  30. CVE-2026-73029 6.5 Moyenne

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

  31. CVE-2026-73028 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

  32. CVE-2026-68787 7.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

  33. CVE-2026-68786 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  34. CVE-2026-68785 4.9 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  35. CVE-2026-68784 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  36. CVE-2026-68781 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  37. CVE-2026-68780 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  38. CVE-2026-68779 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  39. CVE-2026-68778 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  40. CVE-2026-68777 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  41. CVE-2026-68776 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

  42. CVE-2026-68775 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  43. CVE-2026-67648 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

  44. CVE-2026-67645 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  45. CVE-2026-67643 9.8 Critique

    Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR)

    Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

  46. CVE-2026-67641 6.5 Moyenne

    Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR)

    Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.

  47. CVE-2026-67639 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  48. CVE-2026-67636 9.0 Critique

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.

  49. CVE-2026-67633 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.

  50. CVE-2026-67631 9.8 Critique

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

  51. CVE-2026-67630 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  52. CVE-2026-67629 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  53. CVE-2026-67624 6.5 Moyenne

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  54. CVE-2026-67393 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

  55. CVE-2026-67390 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

  56. CVE-2026-67389 6.5 Moyenne

    Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR)

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  57. CVE-2026-67388 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  58. CVE-2026-67386 6.5 Moyenne

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

  59. CVE-2026-67385 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Use after free in SQL Server allows an authorized attacker to execute code over a network.

  60. CVE-2026-67384 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.

  61. CVE-2026-67381 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

  62. CVE-2026-67380 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  63. CVE-2026-67379 8.5 Élevée

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  64. CVE-2026-67378 9.0 Critique

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.

  65. CVE-2026-67376 7.5 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.

  66. CVE-2026-67370 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  67. CVE-2026-67368 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.

  68. CVE-2026-66820 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  69. CVE-2026-66819 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  70. CVE-2026-66818 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.

  71. CVE-2026-66816 6.5 Moyenne

    Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR) · Microsoft SQL Server 2025 (CU8) · Microsoft SQL Server 2025 for x64-based Systems (GDR)

    Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.

  72. CVE-2026-66814 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

  73. CVE-2026-47297 8.1 Élevée

    Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR) · Microsoft SQL Server 2022 (CU 26) · Microsoft SQL Server 2022 (GDR)

    Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

  74. CVE-2026-47295 8.8 Élevée

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  75. CVE-2026-55002 8.8 Élevée

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.

  76. CVE-2026-54118 9.8 Critique

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

  77. CVE-2026-54117 9.8 Critique

    Microsoft SQL Server 2025 (CU 6) · Microsoft SQL Server 2025 for x64-based Systems (GDR) · Microsoft sql server 2016 · Microsoft sql server 2017

    Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

  78. CVE-2026-47296 7.5 Élevée

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  79. CVE-2026-40370 8.8 Élevée

    Microsoft SQL Server 2016 Service Pack 3 (GDR) · Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack · Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR)

    External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.